6.5 Describe Characteristics of REST-based APIs (authentication Types, CRUD, HTTP Verbs, and Data Encoding) 200-301 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A network engineer is automating the configuration of a router. The engineer needs to update the router's hostname and also ensure that the configuration is saved to the startup configuration. The REST API provides a /device endpoint that supports GET, PUT, and PATCH, and a separate /save endpoint that accepts POST. The engineer wants to minimize the number of API calls and avoid overwriting other device settings. What should the engineer do?

   • AUse PUT on /device with the full configuration, then POST to /save
   • BUse GET on /device to retrieve the configuration, then PUT to update the hostname, then POST to /save
   • CUse PATCH on /device with only the hostname field, then POST to /save
   • DUse POST on /device with the hostname field, then POST to /save
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A network administrator is writing a script to automate the creation of a new VLAN on a switch using a REST API. The API endpoint /vlans accepts a JSON payload with the VLAN ID and name. Which HTTP verb should the script use to create the VLAN resource?

   • APUT
   • BPATCH
   • CPOST
   • DGET
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A REST API client needs to modify only the 'description' field of an existing resource without affecting other fields. Which CRUD operation best describes this action?

   • ADelete
   • BCreate
   • CUpdate
   • DRead
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which statement accurately describes token-based authentication in REST APIs?

   • AThe server stores the client's password and compares it with the token on every request.
   • BThe token is only used during the initial handshake and is not sent in subsequent requests.
   • CThe client sends a token with each request, and the server validates it without requiring the client to resend credentials.
   • DThe token is a static value that never expires and is shared among all users.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A network automation engineer is writing a script that uses a REST API to retrieve device configuration from a network management platform. The API documentation states that the endpoint requires authentication and that the client must first exchange credentials for a time-limited access token. Which authentication method is the engineer using?

   • AOAuth 2.0 client credentials grant
   • BBasic authentication with the username and password in the Authorization header
   • CDigest authentication with a nonce value
   • DAPI key authentication with the key in a custom header
   Reveal Solution Discussion Select an answer first