All Cisco exams
Free 200-901 practice test: 30 questions with answers
30 original questions for Automating Networks Using Cisco Platforms (CCNAAUTO), drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.
- Free questions
- 30
- Full bank
- 100 questions
- Real exam
- 120 min
All 30 200-901 questions with answers
The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.
Network automation and programmability (8 questions)
Question 1
A network team wants to change many switches the same way and track which change is applied to which device. Which approach best supports this?
- ACopying a configuration from a random device to every switch in the network without review
- BManual changes typed on each switch in the CLI by an engineer
- CVersion-controlled templates applied by automation with logs of each change
- DChanging the configuration after a user complains about a fault
Show answer and explanationHide answer
Correct answer: CVersion-controlled templates applied by automation give repeatable changes and an audit trail per device. Manual typing, random copies and complaint-driven changes are inconsistent and untraceable.
Question 2
Which data format is commonly used to represent structured network configuration data in a human-readable way that automation tools can parse?
- ARAID 5
- BYAML
- CCSMA/CD
- DARP
Show answer and explanationHide answer
Correct answer: BYAML is a human-readable structured format that tools such as Ansible use for variables and inventories. RAID, CSMA/CD and ARP are not data formats.
Question 3
An automation script receives a JSON response from a REST API. The script must extract the value of the field hostname. Which approach is correct?
- ASearch the raw text by eye and type the value manually
- BConvert the JSON response to a PNG image using a screenshot tool and read it
- CIgnore the response and assume the hostname from the device's label
- DParse the JSON into a data structure and read the hostname key
Show answer and explanationHide answer
Correct answer: DParsing the JSON into a data structure and reading the key is reliable and repeatable. Manual reading, image conversion and assumptions are error-prone.
Question 4
Which HTTP method is used to create a new resource through a REST API, such as adding a new VLAN?
- AGET
- BHEAD
- CPOST
- DDELETE
Show answer and explanationHide answer
Correct answer: CPOST is used to create resources, while GET reads, DELETE removes and HEAD retrieves headers only.
Question 5
A REST API returns HTTP status code 401 when a script calls it. What does this status most likely indicate?
- AThe request lacks valid authentication credentials
- BThe server is temporarily down for maintenance
- CThe new resource was created successfully
- DThe requested page has moved permanently
Show answer and explanationHide answer
Correct answer: A401 means the request is unauthenticated or the credentials are invalid. A 503 indicates an unavailable service, 201 indicates creation, and 301 indicates a permanent redirect.
Question 6
A script must check whether an interface is up on each device in a network of 200 devices. Which approach is most efficient and reliable?
- ALog into each device by hand every hour to check the interface status
- BQuery the devices through their API or NETCONF/RESTCONF in a loop with error handling
- CWait for end users to report a problem through the helpdesk queue after an outage starts
- DGuess the interface status from the device's hostname naming convention and the site label
Show answer and explanationHide answer
Correct answer: BA loop over the devices with programmatic queries and error handling checks all devices consistently and quickly. Manual logins, guessing from names and waiting for reports are slow or unreliable.
Question 7
Which two benefits does network automation provide to an operations team? (Choose two.)
- AAutomatic removal of the need for any testing
- BGuaranteed elimination of all network failures
- CFaster and repeatable changes with fewer manual errors
- DA requirement to log in to every device manually
- EConsistent configuration across many devices
Show answer and explanationHide answer
Correct answer: C, EAutomation applies consistent configuration and makes changes faster and more repeatable with fewer manual mistakes. It does not remove the need for testing, it does not guarantee zero failures, and it reduces manual logins.
Question 8
Which part of a REST API response tells the client the format of the body, such as JSON?
- AThe user's password
- BThe Content-Type header
- CThe request method name
- DThe DNS suffix
Show answer and explanationHide answer
Correct answer: BThe Content-Type header identifies the format of the response body, which tells the client how to parse it. The request method, passwords and DNS suffixes do not describe the body format.
Software development and design (8 questions)
Question 9
A developer wants to track changes to an automation script, go back to earlier versions, and share the work with a team. Which tool should be used?
- AGit
- BA printed copy of the script
- CA USB drive copied each day
- DAn email attachment named final-final
Show answer and explanationHide answer
Correct answer: AGit tracks changes, supports rollback, and enables collaboration through branches and merges. USB copies, printouts and emailed files lose history and make collaboration difficult.
Question 10
A team's automation code must be tested before it changes production devices. Which practice is most appropriate?
- AAutomated tests run in a lab or staging environment before deployment
- BSkipping formal testing for small configuration changes today
- CRelying on end users to find problems after changes are deployed
- DTesting directly on production devices during peak hours
Show answer and explanationHide answer
Correct answer: AAutomated tests in a lab or staging environment catch errors before production, which is the safe approach. Testing on production, skipping tests and waiting for users all increase the chance of outages.
Question 11
A script stores a device password directly in the code, and the code is shared in a public repository. What is the most appropriate fix?
- ALeave the password in the script and add a comment that says it is secret before committing
- BRemove the password, store it in a secrets manager, and rotate the exposed password
- CMake the repository private and keep the password in the code, restricting access to the core team
- DShare the password on a public website so that it is well known to the developer community
Show answer and explanationHide answer
Correct answer: BThe exposed password must be rotated, and secrets belong in a secrets manager rather than in code. Comments do not protect secrets, a private repository still keeps the password in code, and publishing passwords is unsafe.
Question 12
A function in an automation script is called many times with the same input, and the result never changes. Which design property does this describe?
- ARandomness that changes output every call
- BIdempotence and determinism for the same inputs
- CRecursion with no base case that loops forever
- DConcurrency that can cause race conditions
Show answer and explanationHide answer
Correct answer: BA deterministic function returns the same output for the same input, and repeated calls with the same effect are idempotent. Random output, endless recursion and race conditions are different properties.
Question 13
Which Python construct repeats an action for each item in a list of devices?
- AA YAML anchor only
- BA CSS selector
- CA printer queue
- DA for loop
Show answer and explanationHide answer
Correct answer: DA for loop iterates over each item in a sequence and runs the enclosed code for each one. CSS selectors, YAML anchors and printer queues do not repeat actions over a list in Python.
Question 14
A Python script stores device details in a dictionary. What kind of data does a dictionary hold?
- AOnly a single number
- BBinary machine code
- CA list of hardware IDs only
- DKey-value pairs
Show answer and explanationHide answer
Correct answer: DA dictionary maps keys to values, which suits device attributes such as hostname and address. It is not limited to a number, it is not machine code, and it is not restricted to hardware IDs.
Question 15
Which two practices help keep credentials safe in automation scripts? (Choose two.)
- ACommit tokens to the repository so the team can share them
- BPrint passwords in the logs to help debugging
- CUse least-privilege service accounts for each automation task
- DShare one administrator token across all scripts
- ERead credentials from environment variables or a secrets manager at runtime
Show answer and explanationHide answer
Correct answer: C, ERuntime retrieval keeps credentials out of code, and least-privilege service accounts limit the impact of a leak. Committed tokens, printed passwords and shared administrator tokens all expose credentials.
Question 16
Which two Python tools are commonly used to call REST APIs? (Choose two.)
- AThe requests library
- BThe pandas library for image editing only
- CThe Excel macro recorder
- DA PowerPoint plugin
- EThe built-in urllib or http.client modules
Show answer and explanationHide answer
Correct answer: A, EThe requests library and the standard urllib and http.client modules send HTTP requests from Python. Pandas is for data analysis, and the macro recorder and PowerPoint plugins are not API clients.
Automation tools and APIs (7 questions)
Question 17
Which Cisco platform provides a centralized REST API and controller for managing many network devices, including policy and automation?
- ACisco Packet Tracer classroom simulator
- BCisco ASDM device manager for one firewall unit
- CCisco Webex Meetings video collaboration platform
- DCisco Catalyst Center (formerly DNA Center)
Show answer and explanationHide answer
Correct answer: DCatalyst Center provides centralized management, policy and APIs for many devices in enterprise networks. Packet Tracer is a simulator, ASDM manages a single firewall, and Webex is a collaboration product.
Question 18
A team wants to model the desired state of a network service in a declarative way, and have a tool make the devices match it. Which approach describes this?
- AManual ticket-based changes
- BAd hoc scripts with no state
- CIntent-based networking
- DA static paper inventory
Show answer and explanationHide answer
Correct answer: CIntent-based networking describes the desired outcome and uses automation to reconcile devices to it. Manual tickets, ad hoc scripts and paper inventories do not model desired state.
Question 19
Which Cisco platform is used to model and manage the configuration of a device through NETCONF with YANG models?
- ACisco Meraki dashboard only for wireless guests
- BCisco Packet Tracer
- CCisco IOS XE with NETCONF and YANG
- DCisco Webex Calling
Show answer and explanationHide answer
Correct answer: CIOS XE supports NETCONF with YANG models, which provide structured configuration and state. Packet Tracer is a simulator, the Meraki dashboard is for cloud-managed devices, and Webex Calling is a telephony product.
Question 20
An engineer wants to deploy a configuration to several routers from a single playbook. Which automation tool is commonly used for this kind of agentless configuration?
- AAnsible
- BMicrosoft Word
- CAdobe Acrobat
- DPaint
Show answer and explanationHide answer
Correct answer: AAnsible performs agentless configuration management over SSH or APIs, using playbooks that run across many devices. Word, Acrobat and Paint are not automation tools.
Question 21
A platform team wants a programmatic way to create, update and delete the network policies of a controller without using the graphical interface. Which feature should be used?
- AThe controller's northbound REST API
- BManual keystrokes on the console
- CEmail requests to the controller administrator
- DA screen capture of the interface
Show answer and explanationHide answer
Correct answer: AA northbound REST API exposes controller functions for programmatic creation, update and deletion of policies. Screen captures, keystrokes and emails are manual and not automation.
Question 22
Webhooks are used in network automation to notify an external system when an event occurs on a controller. Which statement describes a webhook correctly?
- AAn HTTP callback that the platform sends to a configured URL when an event happens
- BA physical cable standard
- CA password policy for administrators
- DA type of routing protocol
Show answer and explanationHide answer
Correct answer: AA webhook is an HTTP callback that sends event data to a URL, which lets external systems react to events. Routing protocols, cable standards and password policies are unrelated.
Question 23
A network operations centre wants a script to run when a device raises a critical alarm. Which combination supports this event-driven automation?
- AA script that runs once a year
- BEvent subscription or webhook that triggers a script or workflow on the alarm
- CManual monitoring of the alarm panel
- DTurning off alarms to reduce noise
Show answer and explanationHide answer
Correct answer: BEvent subscriptions or webhooks trigger scripts or workflows as alarms occur, which is event-driven automation. Annual scripts, manual monitoring and disabled alarms do not respond to events.
Network fundamentals (7 questions)
Question 24
An automation script must reach a router's management interface over the network. Which layer of the OSI model is responsible for end-to-end logical addressing used by the script?
- AData link layer (Layer 2)
- BPhysical layer (Layer 1)
- CNetwork layer (Layer 3)
- DPresentation layer (Layer 6)
Show answer and explanationHide answer
Correct answer: CThe network layer provides logical IP addressing and routing between networks, which the script depends on to reach the device. The physical and data link layers handle local delivery, and the presentation layer does not provide addressing.
Question 25
A script uses the HTTPS API of a controller. Which transport protocol and port are used by default for HTTPS?
- ATCP port 443
- BUDP port 53
- CUDP port 123
- DTCP port 22
Show answer and explanationHide answer
Correct answer: AHTTPS uses TCP port 443 by default. DNS uses UDP 53, SSH uses TCP 22, and NTP uses UDP 123.
Question 26
An engineer wants to test whether a device's API port is reachable from the automation server before running a script. Which tool is most suitable?
- AA word processor with spell check and grammar tools for drafting the automation notes
- BA spreadsheet formula that totals the device inventory counts in the summary sheet
- CA web browser cache clear on the automation server to refresh stored page content
- DA TCP connection test to the port, such as nc -zv or a similar utility
Show answer and explanationHide answer
Correct answer: DA TCP connection test verifies that the port accepts connections, which is the check needed before scripting. Word processors, spreadsheets and cache clearing do not test reachability.
Question 27
Which IPv4 addressing concept lets an automation server reach devices on several subnets through a single default route?
- AA default gateway on the server's subnet
- BA loopback address for each device
- CA multicast group address for devices
- DA broadcast address for the devices
Show answer and explanationHide answer
Correct answer: AThe default gateway forwards traffic for destinations outside the local subnet, which lets the server reach other subnets through one route. Broadcast, loopback and multicast addresses do not provide that routing function.
Question 28
Which two statements about SSH and HTTPS are correct? (Choose two.)
- AHTTPS uses TCP port 80 by default
- BBoth protocols encrypt the data they carry
- CSSH uses UDP port 53 by default
- DSSH is commonly used for command-line access to devices
- EBoth protocols send data in plain text
Show answer and explanationHide answer
Correct answer: B, DSSH and HTTPS both encrypt traffic, and SSH is the standard for command-line device access. HTTPS uses port 443 by default and SSH uses TCP 22, and neither sends plain text.
Question 29
A network automation script must send a request to a device that is on a different network segment. Which device forwards the request toward its destination?
- AThe switch's MAC address table
- BA DNS server
- CThe default gateway (router)
- DThe NTP server
Show answer and explanationHide answer
Correct answer: CThe default gateway, a router, forwards traffic for destinations outside the local subnet. MAC tables, DNS servers and NTP servers do not route traffic between networks.
Question 30
A device must be discovered by its name rather than its IP address by an automation tool. Which service resolves names to IP addresses?
- ADHCP
- BDNS
- CSNMP
- DSyslog
Show answer and explanationHide answer
Correct answer: BDNS resolves hostnames to IP addresses. DHCP assigns addresses, SNMP monitors devices, and Syslog collects log messages.