NEW Questions & Answers with Detailed Rationales CCNA
Automation 200-901 CCNAAUTO v1.1 September 2026
Updated
This exam covers software development and design, APIs, Cisco platforms, application deployment and security,
infrastructure automation, network fundamentals, and network programmability as defined by the Cisco 200-901
v1.1 blueprint. It tests the ability to design, build, and secure automated network solutions using modern DevOps
practices and Cisco DevNet tools. It contains 50 multiple-choice questions, each with four distractors and a fully
worked rationale that explains why the keyed answer is correct. Questions are organized into clearly labelled
sections that mirror the major content areas of the course. Targeted learning outcomes include: Explain the
fundamental concepts of network programmability and automation, including SDN, controllers, and model-driven
telemetry.; Construct and troubleshoot REST API calls to Cisco platforms using authentication, HTTP methods,
and data formats.; Apply software development best practices (Git, CI/CD, unit testing) to network automation
code and configuration management tools.; Implement secure application deployment using containers, edge
computing, and Cisco security APIs.. Every item has been reviewed for clinical accuracy, current guidelines, and
clarity so that students can study with confidence and self-correct as they work through the bank. Use it as a
high-yield review immediately before the exam, or as a structured practice tool during the unit - the rationales
double as concise teaching notes. The recommended writing time is 2 hours, with a passing score of 80%. Aligned
with Aligned with US university standards for upper-division undergraduate coursework; prepares students for
Section 1: General (Questions 1-50)
1 Which HTTP status code indicates a successful POST that created a resource with
a new URI?
A) 200 OK
B) 201 Created
C) 202 Accepted
D) 204 No Content
Answer: B
Rationale: 201 Created is returned when a new resource is successfully created and
includes a Location header with the new URI. 200 OK is generic success without
creation, 202 Accepted indicates asynchronous processing, and 204 No Content is
used when no body is returned.
2 Which Python data structure is most efficient for frequent membership testing of
device hostnames?
A) List
B) Tuple
C) Set
D) Dictionary
,Answer: C
Rationale: Sets use hash-based lookups, providing O(1) average-case membership
testing, while lists and tuples require O(n) scans. Dictionaries also offer O(1)
lookups but store key-value pairs, making sets the optimal choice for pure
membership checks.
3 In a CI/CD pipeline, which Git operation integrates feature branches while
preserving commit history?
A) git merge --squash
B) git rebase
C) git cherry-pick
D) git reset --hard
Answer: B
Rationale: git rebase reapplies commits from one branch onto another, creating a
linear history and preserving individual commits. Squash merge condenses history,
cherry-pick duplicates a single commit, and reset --hard discards changes, none of
which preserve full history.
4 Which YANG model type allows multiple instances of a list keyed by a leaf for
configuration data?
A) container
B) list
C) leaf-list
D) choice
Answer: B
Rationale: A YANG list defines a collection of entries, each uniquely identified by
one or more key leaves, and can be used for configuration or state data. Containers
group nodes without keys, leaf-lists hold multiple values of the same type without
keys, and choice provides mutually exclusive alternatives.
5 Which Cisco platform provides a centralized policy controller for intent-based
networking in the data center?
A) Cisco DNA Center
B) Cisco ACI
C) Cisco SD-WAN vManage
D) Cisco Meraki Dashboard
Answer: B
Rationale: Cisco ACI (Application Centric Infrastructure) uses the APIC controller to
, enforce policy-driven automation in data centers. DNA Center manages enterprise
campus fabrics, vManage handles SD-WAN, and Meraki Dashboard is
cloud-managed networking for branch and retail.
6 Which REST API authentication method uses a base64-encoded
username:password in the HTTP header?
A) OAuth 2.0
B) Basic Auth
C) API Key
D) JWT
Answer: B
Rationale: Basic Auth encodes credentials with base64 and places them in the
Authorization header. OAuth 2.0 uses token exchange, API keys are typically passed
as query parameters or headers, and JWT is a token format often used with OAuth,
not a standalone authentication scheme.
7 In a Dockerfile, which instruction reduces image size by combining commands
into a single layer?
A) RUN apt-get update && apt-get install -y package
B) RUN apt-get update
C) RUN apt-get install -y package
D) COPY . /app
Answer: A
Rationale: Chaining commands with && in a single RUN instruction creates one
layer, avoiding intermediate layer bloat. Separate RUN instructions create multiple
layers, and COPY adds files but does not combine commands.
8 Which Ansible module is used to retrieve operational state from a Cisco IOS
device without making configuration changes?
A) ios_config
B) ios_command
C) ios_facts
D) ios_banner
Answer: C
Rationale: ios_facts gathers device facts such as interfaces, version, and hardware
details without altering configuration. ios_command executes show commands but
does not parse structured facts, ios_config pushes configuration changes, and
ios_banner manages login banners.