All Cisco exams

Free 200-901 practice test: 30 questions with answers

30 original questions for Automating Networks Using Cisco Platforms (CCNAAUTO), drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.

Free questions
30
Full bank
100 questions
Real exam
120 min

200-901 exam guide: topics, cost and format

All 30 200-901 questions with answers

The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.

Network automation and programmability (8 questions)

  1. Question 1

    A network team wants to change many switches the same way and track which change is applied to which device. Which approach best supports this?

    1. ACopying a configuration from a random device to every switch in the network without review
    2. BManual changes typed on each switch in the CLI by an engineer
    3. CVersion-controlled templates applied by automation with logs of each change
    4. DChanging the configuration after a user complains about a fault
    Show answer and explanation
    Correct answer: C

    Version-controlled templates applied by automation give repeatable changes and an audit trail per device. Manual typing, random copies and complaint-driven changes are inconsistent and untraceable.

  2. Question 2

    Which data format is commonly used to represent structured network configuration data in a human-readable way that automation tools can parse?

    1. ARAID 5
    2. BYAML
    3. CCSMA/CD
    4. DARP
    Show answer and explanation
    Correct answer: B

    YAML is a human-readable structured format that tools such as Ansible use for variables and inventories. RAID, CSMA/CD and ARP are not data formats.

  3. Question 3

    An automation script receives a JSON response from a REST API. The script must extract the value of the field hostname. Which approach is correct?

    1. ASearch the raw text by eye and type the value manually
    2. BConvert the JSON response to a PNG image using a screenshot tool and read it
    3. CIgnore the response and assume the hostname from the device's label
    4. DParse the JSON into a data structure and read the hostname key
    Show answer and explanation
    Correct answer: D

    Parsing the JSON into a data structure and reading the key is reliable and repeatable. Manual reading, image conversion and assumptions are error-prone.

  4. Question 4

    Which HTTP method is used to create a new resource through a REST API, such as adding a new VLAN?

    1. AGET
    2. BHEAD
    3. CPOST
    4. DDELETE
    Show answer and explanation
    Correct answer: C

    POST is used to create resources, while GET reads, DELETE removes and HEAD retrieves headers only.

  5. Question 5

    A REST API returns HTTP status code 401 when a script calls it. What does this status most likely indicate?

    1. AThe request lacks valid authentication credentials
    2. BThe server is temporarily down for maintenance
    3. CThe new resource was created successfully
    4. DThe requested page has moved permanently
    Show answer and explanation
    Correct answer: A

    401 means the request is unauthenticated or the credentials are invalid. A 503 indicates an unavailable service, 201 indicates creation, and 301 indicates a permanent redirect.

  6. Question 6

    A script must check whether an interface is up on each device in a network of 200 devices. Which approach is most efficient and reliable?

    1. ALog into each device by hand every hour to check the interface status
    2. BQuery the devices through their API or NETCONF/RESTCONF in a loop with error handling
    3. CWait for end users to report a problem through the helpdesk queue after an outage starts
    4. DGuess the interface status from the device's hostname naming convention and the site label
    Show answer and explanation
    Correct answer: B

    A loop over the devices with programmatic queries and error handling checks all devices consistently and quickly. Manual logins, guessing from names and waiting for reports are slow or unreliable.

  7. Question 7

    Which two benefits does network automation provide to an operations team? (Choose two.)

    1. AAutomatic removal of the need for any testing
    2. BGuaranteed elimination of all network failures
    3. CFaster and repeatable changes with fewer manual errors
    4. DA requirement to log in to every device manually
    5. EConsistent configuration across many devices
    Show answer and explanation
    Correct answer: C, E

    Automation applies consistent configuration and makes changes faster and more repeatable with fewer manual mistakes. It does not remove the need for testing, it does not guarantee zero failures, and it reduces manual logins.

  8. Question 8

    Which part of a REST API response tells the client the format of the body, such as JSON?

    1. AThe user's password
    2. BThe Content-Type header
    3. CThe request method name
    4. DThe DNS suffix
    Show answer and explanation
    Correct answer: B

    The Content-Type header identifies the format of the response body, which tells the client how to parse it. The request method, passwords and DNS suffixes do not describe the body format.

Software development and design (8 questions)

  1. Question 9

    A developer wants to track changes to an automation script, go back to earlier versions, and share the work with a team. Which tool should be used?

    1. AGit
    2. BA printed copy of the script
    3. CA USB drive copied each day
    4. DAn email attachment named final-final
    Show answer and explanation
    Correct answer: A

    Git tracks changes, supports rollback, and enables collaboration through branches and merges. USB copies, printouts and emailed files lose history and make collaboration difficult.

  2. Question 10

    A team's automation code must be tested before it changes production devices. Which practice is most appropriate?

    1. AAutomated tests run in a lab or staging environment before deployment
    2. BSkipping formal testing for small configuration changes today
    3. CRelying on end users to find problems after changes are deployed
    4. DTesting directly on production devices during peak hours
    Show answer and explanation
    Correct answer: A

    Automated tests in a lab or staging environment catch errors before production, which is the safe approach. Testing on production, skipping tests and waiting for users all increase the chance of outages.

  3. Question 11

    A script stores a device password directly in the code, and the code is shared in a public repository. What is the most appropriate fix?

    1. ALeave the password in the script and add a comment that says it is secret before committing
    2. BRemove the password, store it in a secrets manager, and rotate the exposed password
    3. CMake the repository private and keep the password in the code, restricting access to the core team
    4. DShare the password on a public website so that it is well known to the developer community
    Show answer and explanation
    Correct answer: B

    The exposed password must be rotated, and secrets belong in a secrets manager rather than in code. Comments do not protect secrets, a private repository still keeps the password in code, and publishing passwords is unsafe.

  4. Question 12

    A function in an automation script is called many times with the same input, and the result never changes. Which design property does this describe?

    1. ARandomness that changes output every call
    2. BIdempotence and determinism for the same inputs
    3. CRecursion with no base case that loops forever
    4. DConcurrency that can cause race conditions
    Show answer and explanation
    Correct answer: B

    A deterministic function returns the same output for the same input, and repeated calls with the same effect are idempotent. Random output, endless recursion and race conditions are different properties.

  5. Question 13

    Which Python construct repeats an action for each item in a list of devices?

    1. AA YAML anchor only
    2. BA CSS selector
    3. CA printer queue
    4. DA for loop
    Show answer and explanation
    Correct answer: D

    A for loop iterates over each item in a sequence and runs the enclosed code for each one. CSS selectors, YAML anchors and printer queues do not repeat actions over a list in Python.

  6. Question 14

    A Python script stores device details in a dictionary. What kind of data does a dictionary hold?

    1. AOnly a single number
    2. BBinary machine code
    3. CA list of hardware IDs only
    4. DKey-value pairs
    Show answer and explanation
    Correct answer: D

    A dictionary maps keys to values, which suits device attributes such as hostname and address. It is not limited to a number, it is not machine code, and it is not restricted to hardware IDs.

  7. Question 15

    Which two practices help keep credentials safe in automation scripts? (Choose two.)

    1. ACommit tokens to the repository so the team can share them
    2. BPrint passwords in the logs to help debugging
    3. CUse least-privilege service accounts for each automation task
    4. DShare one administrator token across all scripts
    5. ERead credentials from environment variables or a secrets manager at runtime
    Show answer and explanation
    Correct answer: C, E

    Runtime retrieval keeps credentials out of code, and least-privilege service accounts limit the impact of a leak. Committed tokens, printed passwords and shared administrator tokens all expose credentials.

  8. Question 16

    Which two Python tools are commonly used to call REST APIs? (Choose two.)

    1. AThe requests library
    2. BThe pandas library for image editing only
    3. CThe Excel macro recorder
    4. DA PowerPoint plugin
    5. EThe built-in urllib or http.client modules
    Show answer and explanation
    Correct answer: A, E

    The requests library and the standard urllib and http.client modules send HTTP requests from Python. Pandas is for data analysis, and the macro recorder and PowerPoint plugins are not API clients.

Automation tools and APIs (7 questions)

  1. Question 17

    Which Cisco platform provides a centralized REST API and controller for managing many network devices, including policy and automation?

    1. ACisco Packet Tracer classroom simulator
    2. BCisco ASDM device manager for one firewall unit
    3. CCisco Webex Meetings video collaboration platform
    4. DCisco Catalyst Center (formerly DNA Center)
    Show answer and explanation
    Correct answer: D

    Catalyst Center provides centralized management, policy and APIs for many devices in enterprise networks. Packet Tracer is a simulator, ASDM manages a single firewall, and Webex is a collaboration product.

  2. Question 18

    A team wants to model the desired state of a network service in a declarative way, and have a tool make the devices match it. Which approach describes this?

    1. AManual ticket-based changes
    2. BAd hoc scripts with no state
    3. CIntent-based networking
    4. DA static paper inventory
    Show answer and explanation
    Correct answer: C

    Intent-based networking describes the desired outcome and uses automation to reconcile devices to it. Manual tickets, ad hoc scripts and paper inventories do not model desired state.

  3. Question 19

    Which Cisco platform is used to model and manage the configuration of a device through NETCONF with YANG models?

    1. ACisco Meraki dashboard only for wireless guests
    2. BCisco Packet Tracer
    3. CCisco IOS XE with NETCONF and YANG
    4. DCisco Webex Calling
    Show answer and explanation
    Correct answer: C

    IOS XE supports NETCONF with YANG models, which provide structured configuration and state. Packet Tracer is a simulator, the Meraki dashboard is for cloud-managed devices, and Webex Calling is a telephony product.

  4. Question 20

    An engineer wants to deploy a configuration to several routers from a single playbook. Which automation tool is commonly used for this kind of agentless configuration?

    1. AAnsible
    2. BMicrosoft Word
    3. CAdobe Acrobat
    4. DPaint
    Show answer and explanation
    Correct answer: A

    Ansible performs agentless configuration management over SSH or APIs, using playbooks that run across many devices. Word, Acrobat and Paint are not automation tools.

  5. Question 21

    A platform team wants a programmatic way to create, update and delete the network policies of a controller without using the graphical interface. Which feature should be used?

    1. AThe controller's northbound REST API
    2. BManual keystrokes on the console
    3. CEmail requests to the controller administrator
    4. DA screen capture of the interface
    Show answer and explanation
    Correct answer: A

    A northbound REST API exposes controller functions for programmatic creation, update and deletion of policies. Screen captures, keystrokes and emails are manual and not automation.

  6. Question 22

    Webhooks are used in network automation to notify an external system when an event occurs on a controller. Which statement describes a webhook correctly?

    1. AAn HTTP callback that the platform sends to a configured URL when an event happens
    2. BA physical cable standard
    3. CA password policy for administrators
    4. DA type of routing protocol
    Show answer and explanation
    Correct answer: A

    A webhook is an HTTP callback that sends event data to a URL, which lets external systems react to events. Routing protocols, cable standards and password policies are unrelated.

  7. Question 23

    A network operations centre wants a script to run when a device raises a critical alarm. Which combination supports this event-driven automation?

    1. AA script that runs once a year
    2. BEvent subscription or webhook that triggers a script or workflow on the alarm
    3. CManual monitoring of the alarm panel
    4. DTurning off alarms to reduce noise
    Show answer and explanation
    Correct answer: B

    Event subscriptions or webhooks trigger scripts or workflows as alarms occur, which is event-driven automation. Annual scripts, manual monitoring and disabled alarms do not respond to events.

Network fundamentals (7 questions)

  1. Question 24

    An automation script must reach a router's management interface over the network. Which layer of the OSI model is responsible for end-to-end logical addressing used by the script?

    1. AData link layer (Layer 2)
    2. BPhysical layer (Layer 1)
    3. CNetwork layer (Layer 3)
    4. DPresentation layer (Layer 6)
    Show answer and explanation
    Correct answer: C

    The network layer provides logical IP addressing and routing between networks, which the script depends on to reach the device. The physical and data link layers handle local delivery, and the presentation layer does not provide addressing.

  2. Question 25

    A script uses the HTTPS API of a controller. Which transport protocol and port are used by default for HTTPS?

    1. ATCP port 443
    2. BUDP port 53
    3. CUDP port 123
    4. DTCP port 22
    Show answer and explanation
    Correct answer: A

    HTTPS uses TCP port 443 by default. DNS uses UDP 53, SSH uses TCP 22, and NTP uses UDP 123.

  3. Question 26

    An engineer wants to test whether a device's API port is reachable from the automation server before running a script. Which tool is most suitable?

    1. AA word processor with spell check and grammar tools for drafting the automation notes
    2. BA spreadsheet formula that totals the device inventory counts in the summary sheet
    3. CA web browser cache clear on the automation server to refresh stored page content
    4. DA TCP connection test to the port, such as nc -zv or a similar utility
    Show answer and explanation
    Correct answer: D

    A TCP connection test verifies that the port accepts connections, which is the check needed before scripting. Word processors, spreadsheets and cache clearing do not test reachability.

  4. Question 27

    Which IPv4 addressing concept lets an automation server reach devices on several subnets through a single default route?

    1. AA default gateway on the server's subnet
    2. BA loopback address for each device
    3. CA multicast group address for devices
    4. DA broadcast address for the devices
    Show answer and explanation
    Correct answer: A

    The default gateway forwards traffic for destinations outside the local subnet, which lets the server reach other subnets through one route. Broadcast, loopback and multicast addresses do not provide that routing function.

  5. Question 28

    Which two statements about SSH and HTTPS are correct? (Choose two.)

    1. AHTTPS uses TCP port 80 by default
    2. BBoth protocols encrypt the data they carry
    3. CSSH uses UDP port 53 by default
    4. DSSH is commonly used for command-line access to devices
    5. EBoth protocols send data in plain text
    Show answer and explanation
    Correct answer: B, D

    SSH and HTTPS both encrypt traffic, and SSH is the standard for command-line device access. HTTPS uses port 443 by default and SSH uses TCP 22, and neither sends plain text.

  6. Question 29

    A network automation script must send a request to a device that is on a different network segment. Which device forwards the request toward its destination?

    1. AThe switch's MAC address table
    2. BA DNS server
    3. CThe default gateway (router)
    4. DThe NTP server
    Show answer and explanation
    Correct answer: C

    The default gateway, a router, forwards traffic for destinations outside the local subnet. MAC tables, DNS servers and NTP servers do not route traffic between networks.

  7. Question 30

    A device must be discovered by its name rather than its IP address by an automation tool. Which service resolves names to IP addresses?

    1. ADHCP
    2. BDNS
    3. CSNMP
    4. DSyslog
    Show answer and explanation
    Correct answer: B

    DNS resolves hostnames to IP addresses. DHCP assigns addresses, SNMP monitors devices, and Syslog collects log messages.