3. Identify the Constraints When Consuming APIs 200-901 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company's automation script uses an API key to access a Cisco Meraki API. The key is stored in a configuration file. The security team requires that the key be rotated every 30 days. What is the best way to handle key rotation without disrupting automation?

   • AUpdate the configuration file manually every 30 days
   • BUse a secrets management service to store and retrieve the key dynamically
   • CDisable key rotation to avoid disruption
   • DHardcode the key in the script to avoid file access issues
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   An API consumer receives a 403 Forbidden response after making a request, even though the request is well-formed and authenticated. Which quota-related scenario could explain this?

   • AThe consumer has exceeded the allowed number of API calls for the current billing period.
   • BThe consumer is using an incorrect HTTP method, such as GET instead of POST.
   • CThe API server is temporarily down for maintenance.
   • DThe consumer's API key has expired.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A developer is integrating with a Cisco Webex API that requires OAuth 2.0 authorization code flow. The application needs to access user data on behalf of a user. What is the correct first step in the authentication process?

   • ADirectly request an access token using client credentials
   • BRedirect the user to the authorization endpoint to obtain an authorization code
   • CSend the user's username and password to the API to get a token
   • DUse an API key in the request header instead of OAuth
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the purpose of a schema in the context of an API?

   • ATo store the API keys and credentials of clients
   • BTo specify the network protocol used to communicate with the API
   • CTo determine the rate limit for each client
   • DTo define the structure, data types, and constraints of the data exchanged with the API
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network automation script polls a Cisco DNA Center API every 5 seconds to collect device health data. The script starts receiving HTTP 429 responses with a Retry-After header. The team needs to maintain data collection while respecting the API's rate limit. What should the script do?

   • AImmediately retry the request after a fixed 1-second delay
   • BSwitch to a different API endpoint that returns the same data
   • CIncrease the polling interval and honor the Retry-After header before retrying
   • DIgnore the 429 responses and continue polling at the same rate
   Reveal Solution Discussion Select an answer first