Free 200-901 practice test: 20 questions
Twenty questions across the six 200-901 domains, weighted roughly as the exam is: three on software development, four on APIs, three on Cisco platforms, three on deployment and security, four on infrastructure and automation and three on network fundamentals. These are original scenario questions. Find the constraint in each scenario before you look at the options.
Software Development and Design
Question 1. A developer wants to try a risky change without affecting the main line of work, and merge it later if it succeeds. What should they use?
- A. A second clone of the repository
- B. A new Git branch
- C. A commit directly on the main branch
- D. git diff
Show answer
Answer: B
A branch isolates the change and can be merged later. Cloning again creates another copy without a shared history workflow. Committing straight to main exposes everyone to the risk. git diff only shows differences.
Want more questions like this? Full 200-901 practice tests →
Question 2. A Python script loads a JSON document with json.loads. The document contains the value true. What is the value in Python?
- A. The string ’true'
- B. The integer 0
- C. None
- D. True
Show answer
Answer: D
JSON true becomes the Python boolean True. The string ’true’ would only appear if the value were quoted. JSON null maps to None, not true. A lowercase true is not a Python keyword.
Want more questions like this? Full 200-901 practice tests →
Question 3. A team delivers working software in two-week iterations, reviews it with users and adjusts the backlog every cycle. Which method is this?
- A. Agile
- B. Waterfall
- C. Test-driven development
- D. MVC
Show answer
Answer: A
Short iterations with review and changing priorities describe agile. Waterfall completes phases sequentially with fixed requirements. TDD is a coding practice, not a project method. MVC is an architectural pattern.
Want more questions like this? Full 200-901 practice tests →
Understanding and Using APIs
Question 4. An API call that worked yesterday now returns HTTP 401 with the same request. What is the most likely cause?
- A. The resource was deleted
- B. The rate limit was exceeded
- C. The access token has expired
- D. The server crashed
Show answer
Answer: C
401 means authentication failed, and a token that expired overnight is the common cause. A 404 would point to a wrong path. A 429 would point to a rate limit. A 500 would point to a server fault.
Want more questions like this? Full 200-901 practice tests →
Question 5. A Python script must send JSON data and automatically set the Content-Type header. Which requests argument should it use?
- A. params=
- B. json=
- C. auth=
- D. timeout=
Show answer
Answer: B
The json argument serialises a dictionary and sets Content-Type to application/json. The params argument builds a query string. The data argument with a dictionary sends form encoding. The auth argument handles credentials.
Want more questions like this? Full 200-901 practice tests →
Question 6. Which statement best describes a webhook?
- A. A technique for polling an API on a schedule
- B. An authentication scheme using API keys
- C. A cache of previous API responses
- D. An HTTP callback sent to your URL when an event occurs
Show answer
Answer: D
A webhook is a callback: the provider sends an HTTP request to your URL when an event happens. It does not require polling. It is not an authentication method. It is not a database or a method of caching responses.
Want more questions like this? Full 200-901 practice tests →
Question 7. A client lists devices through a paginated API and receives only the first 100 of 450 entries. What should the script do?
- A. Follow the pagination links or page parameters until the end
- B. Send a DELETE to reset the list
- C. Treat the first 100 entries as the full list
- D. Switch to basic authentication
Show answer
Answer: A
The script should follow the pagination mechanism, such as a next link or page parameter, until all entries are retrieved. Sending a DELETE makes no sense here. Ignoring the remainder gives incomplete data. Using basic authentication does not change the page size.
Want more questions like this? Full 200-901 practice tests →
Cisco Platforms and Development
Question 8. A script needs to create a Webex space and post a message in it. Which kind of credential does the Webex REST API expect on these calls?
- A. A SOAP session cookie
- B. A Meraki dashboard API key
- C. A bearer access token
- D. An SNMP community string
Show answer
Answer: C
The Webex API uses a bearer access token in the Authorization header. Cisco does not use a SOAP credential for Webex calls. A Meraki dashboard key belongs to a different platform. An SNMP community string is for device monitoring.
Want more questions like this? Full 200-901 practice tests →
Question 9. Which Cisco interface for Unified Communications Manager is a SOAP-based API for configuring telephony objects?
- A. UDS
- B. AXL
- C. RESTCONF
- D. NETCONF
Show answer
Answer: B
AXL is the SOAP and XML administrative interface for CUCM configuration. UDS is a REST interface for user data. RESTCONF and NETCONF are device programmability interfaces for network devices.
Want more questions like this? Full 200-901 practice tests →
Question 10. A developer needs a free hosted Cisco environment to test a script, and a collection of sample projects to start from. Which two DevNet resources fit?
- A. Sandbox and Code Exchange
- B. Forums and API documentation
- C. Learning Labs and forums
- D. API documentation and Learning Labs
Show answer
Answer: A
Sandbox provides the hosted environment and Code Exchange provides sample projects. The forums and API documentation do not provide an environment. Learning labs are guided tutorials, not a hosted environment for your own script.
Want more questions like this? Full 200-901 practice tests →
Application Deployment and Security
Question 11. A development team needs an application to run identically on a laptop, a test server and production, with fast start-up and small footprint. Which deployment type fits best?
- A. Bare metal
- B. A full virtual machine per environment
- C. A container
- D. A manual install on each server
Show answer
Answer: C
Containers package the application and dependencies, share the host kernel, start quickly and run consistently across environments. Bare metal ties the app to specific hardware. A full virtual machine is heavier and slower to start. A manual install on each server invites inconsistency.
Want more questions like this? Full 200-901 practice tests →
Question 12. A CI pipeline has stages build, test and deploy. The test stage fails. What should happen?
- A. The deploy stage should run anyway
- B. The test stage should be skipped in future
- C. The build should be deleted from history
- D. The pipeline should stop before deploy
Show answer
Answer: D
A pipeline stops at a failing stage so that broken code never reaches deployment. Continuing would deploy untested or failing code. Skipping tests defeats the pipeline. Deleting the build does not address the failing tests.
Want more questions like this? Full 200-901 practice tests →
Question 13. An attacker injects a script into a comment field, and it runs in other users' browsers when they view the page. Which OWASP threat is this?
- A. SQL injection
- B. Cross-site scripting
- C. Cross-site request forgery
- D. Brute force
Show answer
Answer: B
A script executing in other users’ browsers via stored input is cross-site scripting. SQL injection targets a database query. CSRF forces an unwanted request using a victim’s session. A brute-force attack tries many credentials.
Want more questions like this? Full 200-901 practice tests →
Infrastructure and Automation
Question 14. Which description matches Ansible?
- A. An agentless automation tool that uses YAML playbooks
- B. A tool that requires an agent installed on every device
- C. A network simulation product
- D. A data modelling language
Show answer
Answer: A
Ansible is agentless, uses YAML playbooks and applies configuration over SSH or APIs. It does not require an agent on each node. It is not a simulation product and is not a language for modelling data.
Want more questions like this? Full 200-901 practice tests →
Question 15. What is the main benefit of model-driven programmability compared with screen scraping the CLI?
- A. It removes the need for authentication
- B. It works without a network connection
- C. It provides structured, consistent data instead of text that must be parsed
- D. It only works for wireless devices
Show answer
Answer: C
Data models give structured, consistent data that scripts can parse reliably across devices. CLI output changes between versions and needs fragile parsing. Model-driven interfaces do not remove the need for authentication, and they do not eliminate the network.
Want more questions like this? Full 200-901 practice tests →
Question 16. Infrastructure is described in text files kept in a Git repository, and each change is reviewed and merged before deployment. What is this practice called?
- A. Edge computing
- B. A reverse proxy
- C. Bare-metal deployment
- D. Infrastructure as code
Show answer
Answer: D
Describing infrastructure in version-controlled files and applying changes through review is infrastructure as code. Edge computing is about location. A reverse proxy is a network component. Bare-metal provisioning is a deployment type, not a practice for managing configuration.
Want more questions like this? Full 200-901 practice tests →
Question 17. In a sequence diagram a client sends a request to an authentication service, receives a token, and then sends a request with the token to a controller. What does the workflow show?
- A. A webhook callback
- B. Token authentication followed by an authorised API call
- C. A polling loop
- D. A CLI session to a device
Show answer
Answer: B
The diagram shows authenticating first and then calling the controller with the obtained token. It is not a webhook, because the client initiates both calls. There is no polling loop shown. No device-level CLI session is involved.
Want more questions like this? Full 200-901 practice tests →
Network Fundamentals
Question 18. Two hosts connect to the same switch but are in different VLANs. What is required for them to communicate?
- A. A router or Layer 3 switch to route between the VLANs
- B. A different cable colour
- C. A DNS server
- D. An NTP server
Show answer
Answer: A
Different VLANs are separate broadcast domains, so traffic must be routed between them by a router or Layer 3 switch. Changing the cable colour does nothing. DNS only resolves names. NTP only synchronises time.
Want more questions like this? Full 200-901 practice tests →
Question 19. Which protocol translates private internal addresses into public addresses so internal hosts can reach the internet?
- A. DHCP
- B. DNS
- C. NAT
- D. SNMP
Show answer
Answer: C
NAT performs the translation at the network edge. DHCP assigns addresses. DNS resolves names. SNMP monitors devices.
Want more questions like this? Full 200-901 practice tests →
Question 20. Which plane of a network device carries user traffic from one interface to another?
- A. Management plane
- B. Control plane
- C. Application plane
- D. Data plane
Show answer
Answer: D
The data plane forwards the traffic itself. The control plane decides where traffic should go, for example through routing protocols. The management plane handles configuration and monitoring. There is no separate ‘application plane’ in this model.
Want more questions like this? Full 200-901 practice tests →
After the test
Count the correct answers per domain and compare them with the weights in the exam format. Anything below about 80% in a domain deserves another pass through its guide, starting with APIs if you missed several there, because the weight is highest. See the study plan and exam day guide for the next steps.