Step2Study

DevNet Associate (DEVASC) v1.0 practice questions

200 free questions with answers and explanations.

Practice test
  1. 51.A cloud engineer is designing a secure connection between an on-premises data center and a cloud provider's virtual private cloud (VPC). The connection must provide data confidentiality and integrity over the public internet. Which network security technology is typically used to achieve this?Network Fundamentals
  2. 52.A network engineer is tasked with programmatically configuring Quality of Service (QoS) policies on a fleet of Cisco IOS XE routers. The engineer needs to define traffic classes, allocate bandwidth, and prioritize specific application flows. Which programmability feature on Cisco IOS XE would be most suitable for this task, offering a declarative approach to configuration management?Cisco Platforms and Development
  3. 53.A network engineer wants to automate the verification of device reachability and basic configuration settings across a large number of Cisco IOS XE devices after a scheduled maintenance window. Which programmability feature would be most efficient for gathering this operational data programmatically?Cisco Platforms and Development
  4. 54.A developer needs to integrate a third-party application with Cisco Webex Teams to send automated messages, create spaces, and add members. Which type of API should the developer primarily use to achieve these programmatic interactions?Cisco Platforms and Development
  5. 55.A network engineer is configuring a new subnet for a small branch office that will host a maximum of 25 devices, including computers, printers, and VoIP phones. To minimize wasted IP addresses while accommodating future growth slightly, what is the smallest subnet mask that should be used?Network Fundamentals
  6. 56.A developer needs to create a Python script that interacts with a network device's REST API. The API requires sending JSON data in the request body and expects JSON data in return. Which Python library and its function would be most suitable for handling both sending and receiving JSON data in HTTP requests?Software Development and Design
  7. 57.A developer is building a network monitoring application that requires access to real-time, high-volume operational data from Cisco IOS XE devices. The application needs to subscribe to specific data streams rather than continuously polling the devices. Which feature of Cisco IOS XE devices best supports this requirement?Cisco Platforms and Development
  8. 58.A developer needs to convert a Python dictionary representing network device data into a JSON formatted string for transmission over an API. The dictionary contains nested structures and various data types. Which Python built-in module and function should be used for this conversion?Software Development and Design
  9. 59.A network engineer is configuring a new Layer 2 switch. To prevent unauthorized devices from connecting to a specific port and to automatically disable the port if a new MAC address is detected, which port security violation mode should be configured?Network Fundamentals
  10. 60.A networking team is developing an automation script to provision new branch office VPNs and configure routing policies across their global network. They need a centralized platform that offers programmatic access to manage their SD-WAN fabric. Which Cisco platform provides APIs for this specific purpose?Cisco Platforms and Development
  11. 61.A developer needs to implement an algorithm that efficiently finds the shortest path between two nodes in a network graph. The network graph has weighted edges representing latency between devices. Which algorithm is most suitable for this task?Software Development and Design
  12. 62.A network automation engineer is developing a Python script to manage VLANs, interfaces, and routing protocols on a Cisco Nexus switch. The engineer requires a programmatic interface that provides direct HTTP/HTTPS access to the switch's configuration and operational state, returning data in JSON or XML format without requiring a separate network management system. Which programmability feature on NX-OS would best meet this requirement?Cisco Platforms and Development
  13. 63.A developer needs to quickly test API calls to Cisco platforms without setting up dedicated infrastructure or purchasing physical devices. They require a pre-configured environment with sample data and API keys to experiment with integrations. Which Cisco resource is specifically designed for this purpose?Cisco Platforms and Development
  14. 64.A developer is working on a network automation script that needs to process configuration data. The data is provided in a human-readable format, uses indentation to define structure, and supports comments. Which data format is being described?Software Development and Design
  15. 65.A network automation engineer is developing a Python script to gather real-time telemetry data from Cisco IOS XE devices, specifically interface statistics, using a push-based mechanism. Which technology should the engineer leverage to efficiently stream this data from the devices to a collection server?Cisco Platforms and Development
  16. 66.A network security engineer needs to integrate Cisco FSO (Full-Stack Observability) with a custom security orchestration platform. The platform requires the ability to programmatically retrieve a list of all vulnerabilities detected across the monitored applications and infrastructure, including their severity and affected entities. Which type of Cisco FSO API would be most appropriate for this requirement?Cisco Platforms and Development
  17. 67.A network engineer wants to automate the configuration of Cisco IOS XE devices using a declarative approach, specifying the desired state rather than a sequence of commands. Which programmability feature would best facilitate this requirement?Cisco Platforms and Development
  18. 68.A network security analyst is reviewing firewall logs and notices a high volume of TCP SYN packets originating from various external IP addresses targeting a web server, but very few corresponding SYN-ACKs are being sent back. This pattern strongly suggests an attack designed to exhaust server resources. Which type of attack is most likely occurring?Network Fundamentals
  19. 69.A network operator is tasked with automating routine configuration backups and software upgrades on a fleet of Cisco IOS XE routers. The operator wants to use a modern, programmatic approach that leverages standard data models for configuration and operational state. Which combination of protocol and data model would be most suitable for this task, providing reliable and structured interaction?Cisco Platforms and Development
  20. 70.A network architect is designing an automation solution for provisioning new VLANs and configuring switchport settings across multiple Cisco Meraki switches. The solution needs to be able to create, update, and delete these network configurations programmatically. Which Meraki API capability should be leveraged?Cisco Platforms and Development
  21. 71.A network automation script needs to store a collection of key-value pairs where the keys are unique device serial numbers (strings) and the values are complex objects representing device configurations. It's crucial to retrieve a device's configuration quickly by its serial number. Which Python data structure offers the most efficient lookup by key?Software Development and Design
  22. 72.A network developer is implementing a RESTful API for a network device. To ensure the API requests are secure and the data exchanged is confidential, which network security fundamental should be primarily addressed when designing the API communication?Network Fundamentals
  23. 73.A network automation engineer is developing a Python script to manage IP addresses on a network device. The script needs to perform a calculation to determine the number of assignable host addresses within a given subnet. If a subnet is defined as 172.16.1.0/27, how many usable host IP addresses are available?Network Fundamentals
  24. 74.A developer is writing an application that needs to ensure reliable, ordered delivery of data segments between two hosts on a network. Which of the following Transport layer protocols would be most appropriate for this requirement?Network Fundamentals
  25. 75.A network engineer is troubleshooting an issue where an application fails to retrieve device configuration via a REST API. The API call returns an HTTP status code 429. What does this status code indicate?Understanding and Using APIs
  26. 76.A network engineer is using Postman to test a new REST API endpoint on a Cisco device. The API expects `application/yang-data+json` as the `Content-Type` for requests that modify configuration. The engineer sends a POST request with a JSON payload, but the API rejects it with an HTTP 415 Unsupported Media Type error. What is the most likely reason for this error?Understanding and Using APIs
  27. 77.A network security architect is reviewing an internal API that uses Basic Authentication for access. The API is exposed over the public internet. What is the most critical security vulnerability associated with using Basic Authentication in this scenario without additional protective measures?Understanding and Using APIs
  28. 78.A developer is designing a new microservice that needs to interact with several internal Cisco APIs. To ensure consistent data types and clear communication contracts, the developer wants to use a specification that clearly defines the API's endpoints, operations, parameters, and responses. Which specification is best suited for this purpose?Understanding and Using APIs
  29. 79.A junior developer is confused about the differences between REST, SOAP, and GraphQL. The lead developer explains that REST APIs are characterized by being stateless, using standard HTTP methods, and representing resources with URLs. Which of the following best describes the 'stateless' characteristic of REST APIs?Understanding and Using APIs
  30. 80.A network automation team is developing a CI/CD pipeline. As part of the API testing phase, they need to ensure that the API documentation is always synchronized with the actual API implementation. Which of the following approaches is most effective for automatically verifying API documentation accuracy?Understanding and Using APIs
  31. 81.A network engineer is debugging a Python script that interacts with a REST API. The script uses the `requests` library to send a POST request with a JSON payload. The API consistently returns an HTTP 400 Bad Request error, but the engineer is confident the JSON syntax is correct. What is the most likely missing element that is causing the API to reject the request?Understanding and Using APIs
  32. 82.A developer is using `curl` to interact with a REST API that requires sending a custom HTTP header for authentication. The header name is `X-API-Key` and its value is `abc123def456`. Which `curl` command correctly includes this header in a GET request to `https://api.example.com/data`?Understanding and Using APIs
  33. 83.A network engineer wants to retrieve a list of all active interfaces on a Cisco device using its REST API. The API endpoint is `/restconf/data/ietf-interfaces:interfaces`. They need to ensure that the response is returned in a human-readable, structured format. Which HTTP `Accept` header value should be included in the request to achieve this, assuming the API supports both XML and JSON?Understanding and Using APIs
  34. 84.A developer is documenting a new REST API using OpenAPI Specification (OAS) 3.0. This API includes an endpoint `/users/{userId}` that retrieves details for a specific user. The `userId` is a mandatory path parameter and must be an integer. How should this path parameter be correctly defined in the OpenAPI YAML specification?Understanding and Using APIs
  35. 85.A developer is writing a Python script to interact with a Cisco API that requires an API key for authentication. The API key is sensitive and should not be hardcoded in the script or committed to version control. Which is the most secure and recommended method for the script to access the API key at runtime?Understanding and Using APIs
  36. 86.A network engineer is troubleshooting an issue where an application intermittently fails to retrieve device configuration from a Cisco IOS XE device via its RESTCONF API. The engineer observes that sometimes API requests succeed, but other times they return a `401 Unauthorized` error, even though the user credentials provided are correct and have not changed. Which API authentication mechanism is most likely being used and causing this intermittent issue?Understanding and Using APIs
  37. 87.A network engineer is troubleshooting an issue where a Python script using `requests` to interact with a Cisco API intermittently fails with a `ConnectionError`. The API is known to be stable, and other tools like Postman can reach it consistently. The engineer suspects that the script is making too many requests in a short period, exceeding the API's limits. How can the engineer programmatically implement a delay between API calls to mitigate potential rate limiting issues?Understanding and Using APIs
  38. 88.A network automation script needs to retrieve a list of all active interfaces on a Cisco device using its REST API. The API supports various response formats, including XML and JSON. The script specifically requires the response to be in JSON. Which HTTP header should be included in the GET request to explicitly request a JSON response?Understanding and Using APIs
  39. 89.A developer is performing API testing using Postman. They have a collection of requests that need to be executed sequentially, where the output of one request (e.g., an authentication token) is required as input for a subsequent request. Which Postman feature is best suited for this scenario?Understanding and Using APIs
  40. 90.A developer needs to integrate a new application with a Cisco Identity Services Engine (ISE) API. The ISE API documentation specifies that OAuth 2.0 with the Client Credentials Grant flow should be used for machine-to-machine communication. Which sequence of steps correctly outlines this OAuth 2.0 flow?Understanding and Using APIs
  41. 91.A developer is integrating a Python application with a Cisco DNA Center API, which uses OAuth 2.0 for authentication. After successfully obtaining an access token, the application attempts to make several API calls. It receives an HTTP 401 Unauthorized error after approximately 60 minutes of operation, despite the access token initially being valid. What is the most likely cause of this error?Understanding and Using APIs
  42. 92.A security auditor is reviewing an application that uses OAuth 2.0 for API authorization. The application stores the access token directly in the client's browser local storage after a successful authorization flow. What is the primary security risk associated with this practice?Understanding and Using APIs
  43. 93.A network administrator is evaluating an API rate limiting policy. The policy allows 100 requests per minute per IP address. If a script makes 20 requests every 10 seconds from a single IP, how many minutes will it take for the script to be rate-limited?Understanding and Using APIs
  44. 94.A network automation script needs to retrieve a list of all interfaces on a Cisco device using its REST API. The API documentation specifies the endpoint `/restconf/data/interfaces` and requires the `Accept` header to be set to `application/yang-data+json`. Which `cURL` command would correctly perform this request?Understanding and Using APIs
  45. 95.A network automation developer is integrating a new application with a Cisco DNA Center API. The API uses OAuth 2.0 for authorization. The application is a backend service that needs to access the DNA Center API on its own behalf, without any direct user interaction. Which OAuth 2.0 grant type is most appropriate for this scenario?Understanding and Using APIs
  46. 96.A network security engineer is designing a system to integrate a new application with a Cisco API. The application needs to securely obtain an access token without exposing client credentials in the user agent, and it will be primarily used for server-to-server communication. Which OAuth 2.0 grant type is most appropriate for this scenario?Understanding and Using APIs
  47. 97.A developer is integrating a new application with an existing Cisco network device API. The API documentation specifies that all requests must include an 'Authorization' header with a 'Bearer' token. Which authentication method is being described?Understanding and Using APIs
  48. 98.A network automation engineer is building a CI/CD pipeline. They need to ensure that changes to an API client application are compatible with the API's latest specification before deploying. This involves validating that the client sends requests and handles responses according to the API's contract. Which type of testing is best suited for this purpose?Understanding and Using APIs
  49. 99.A network operations team is integrating a new monitoring tool that needs to receive real-time alerts from a Cisco device's API whenever a specific event (e.g., interface status change) occurs. The monitoring tool does not continuously poll the device. Which API mechanism is best suited for the device's API to proactively notify the monitoring tool?Understanding and Using APIs
  50. 100.A developer is integrating an application with a Cisco API that uses Basic Authentication. The application needs to send a username and password with each API request. To ensure these credentials are transmitted securely, which underlying HTTP mechanism is crucial for protecting Basic Authentication credentials?Understanding and Using APIs