7. Utilize Common API Authentication Mechanisms: Basic, Custom Token, and API Keys 200-901 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A network administrator is configuring a script to query the Cisco Meraki API. The administrator generates an API key and wants to ensure it is used securely. Which of the following practices is the most important to follow?

   • AShare the API key with all team members via email.
   • BInclude the API key in the URL of each request.
   • CStore the API key in an environment variable and reference it in the script.
   • DHardcode the API key in the script for simplicity.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A network administrator is configuring a new automation tool that will manage network devices. The tool supports API keys and Basic authentication. The administrator wants to ensure that if a device is compromised, the attacker cannot use the same credentials to access other devices. What is the best practice?

   • AUse Basic authentication with the same password for all devices.
   • BUse the same API key for all devices to simplify management.
   • CUse Basic authentication but change the password monthly.
   • DUse a unique API key per device and store them in a secrets manager.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A network engineer is troubleshooting a script that uses HTTP Basic Authentication against a Cisco device REST API. The script fails with a 401 Unauthorized error. The engineer verifies that the username and password are correct. Which of the following is the most likely cause of the failure?

   • AThe script is encoding the credentials in plaintext without base64.
   • BThe script is using an API key instead of a username and password.
   • CThe script is using HTTPS instead of HTTP.
   • DThe script is sending the credentials in the request body instead of the Authorization header.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary purpose of an API key?

   • ATo authenticate an individual user with a username and password.
   • BTo encrypt the data exchanged between the client and the API.
   • CTo provide a one-time password for each request.
   • DTo identify the client or application making the API request.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A network engineer is writing a Python script to interact with a legacy network device that only supports HTTP Basic Authentication. The device does not support HTTPS. Which of the following is the most appropriate security measure to take?

   • AUse base64 encoding to encrypt the credentials.
   • BUse a custom token instead of Basic Authentication.
   • CSend the credentials in the URL to avoid using the Authorization header.
   • DUse the API over a VPN or out-of-band management network.
   Reveal Solution Discussion Select an answer first