Question 860
A controller replies HTTP200 to a GET, but the returned JSON contains an empty response list where the requested device should appear. During troubleshooting: An operator marks device discovery successful based only on HTTP200 despite no matching device record. Which underlying cause best explains the recorded behavior?
- HTTP201 is a valid successful resource-creation status, distinct from an error.
- HTTP success indicates the request completed, not that a specific desired record exists.
- The client mistakes a valid empty 204 response for an unsuccessful operation.
- The identity is authenticated but lacks required authorization, rather than merely needing a new token.
Explanation
Correct Answer
B:The actual technical cause is: HTTP success indicates the request completed, not that a specific desired record exists. It specifically explains the observation: an operator marks device discovery successful based only on HTTP200 despite no matching device record. The correcting configuration is: inspect both the success status and the actual payload fields before deciding the requested device exists.
Incorrect Answers
A:That diagnosis is supported by a different symptom: A monitoring rule declares the operation failed because it expects only HTTP200 after POST. Here the recorded observation is: an operator marks device discovery successful based only on HTTP200 despite no matching device record. The applicable cause is: hTTP success indicates the request completed, not that a specific desired record exists.
C:That diagnosis is supported by a different symptom: Repeated DELETE attempts occur because the client demands a JSON body on every success. Here the recorded observation is: an operator marks device discovery successful based only on HTTP200 despite no matching device record. The applicable cause is: hTTP success indicates the request completed, not that a specific desired record exists.
D:That diagnosis is supported by a different symptom: The client repeatedly reauthenticates but still cannot invoke a privileged API. Here the recorded observation is: an operator marks device discovery successful based only on HTTP200 despite no matching device record. The applicable cause is: hTTP success indicates the request completed, not that a specific desired record exists.
Question 861
A controller replies HTTP200 to a GET, but the returned JSON contains an empty response list where the requested device should appear. Select THREE complementary actions: the technical remedy, a direct verification, and the ongoing safeguard. Evidence from an unrelated mechanism is not a substitute for these three responsibilities.
- Troubleshoot identity, permissions and scopes using both HTTP codes and audit logs.
- Validate the response list contains a matching identifier from a known-inventory test.
- Inspect both the success status and the actual payload fields before deciding the requested device exists.
- GET the returned resource to confirm its settings were stored.
- Add schema and resource-presence assertions to REST inventory automation.
- Treat HTTP204 No Content as a successful bodyless response when the API documents it.
Explanation
Correct Answers
B:The decisive acceptance observation is: Validate the response list contains a matching identifier from a known-inventory test. This tests the working mechanism, while the original incident was: an operator marks device discovery successful based only on HTTP200 despite no matching device record.
C:The required correction is: Inspect both the success status and the actual payload fields before deciding the requested device exists. The underlying failure mechanism is: HTTP success indicates the request completed, not that a specific desired record exists. Verify success by carrying out this direct test: validate the response list contains a matching identifier from a known-inventory test.
E:The continuing protective control is: Add schema and resource-presence assertions to REST inventory automation. This addresses the underlying failure mechanism: hTTP success indicates the request completed, not that a specific desired record exists. The corresponding operational check is: validate the response list contains a matching identifier from a known-inventory test.
Incorrect Answers
A:That control reduces a separate risk: The identity is authenticated but lacks required authorization, rather than merely needing a new token. For the described design, the recurring risk arises from: hTTP success indicates the request completed, not that a specific desired record exists. The specific required safeguard is: add schema and resource-presence assertions to REST inventory automation.
D:This test measures a different behavior: GET the returned resource to confirm its settings were stored. It does not establish the target outcome. For the documented fault, the direct acceptance test is: validate the response list contains a matching identifier from a known-inventory test.
F:The needed correction is to inspect both the success status and the actual payload fields before deciding the requested device exists.
Question 862
A REST API receives a valid create request and responds HTTP201 with a new resource identifier. The incident evidence is: A monitoring rule declares the operation failed because it expects only HTTP200 after POST. Which targeted configuration or design change best addresses the failure?
- Interpret HTTP201 Created and verify the returned location/id identifies the created resource.
- Differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403).
- Call the documented Catalyst Center REST API with scoped authentication and correct resource paths.
- Inspect both the success status and the actual payload fields before deciding the requested device exists.
Explanation
Correct Answer
A:The required correction is: Interpret HTTP201 Created and verify the returned location/id identifies the created resource. The underlying failure mechanism is: HTTP201 is a valid successful resource-creation status, distinct from an error. Verify success by carrying out this direct test: gET the returned resource to confirm its settings were stored.
Incorrect Answers
B:Differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403) would not interpret HTTP201 Created and verify the returned location/id identifies the created resource.
C:Call the documented Catalyst Center REST API with scoped authentication and correct resource paths would not interpret HTTP201 Created and verify the returned location/id identifies the created resource.
D:Inspecting both the success status and the actual payload fields would not interpret HTTP201 Created and verify the returned location/id identifies the created resource.
Question 863
A REST API receives a valid create request and responds HTTP201 with a new resource identifier. The proposed remedy is: Interpret HTTP201 Created and verify the returned location/id identifies the created resource. Which observation would most directly confirm that remedy works as intended?
- Validate the response list contains a matching identifier from a known-inventory test.
- GET the returned resource to confirm its settings were stored.
- Inspect authenticated device inventory response and reconcile a known device identifier.
- Test the same endpoint with missing and underprivileged credentials and compare statuses.
Explanation
Correct Answer
B:The decisive acceptance observation is: GET the returned resource to confirm its settings were stored. This tests the working mechanism, while the original incident was: a monitoring rule declares the operation failed because it expects only HTTP200 after POST.
Incorrect Answers
A:This test measures a different behavior: Validate the response list contains a matching identifier from a known-inventory test. It does not establish the target outcome. For the documented fault, the direct acceptance test is: gET the returned resource to confirm its settings were stored.
C:This test measures a different behavior: Inspect authenticated device inventory response and reconcile a known device identifier. It does not establish the target outcome. For the documented fault, the direct acceptance test is: gET the returned resource to confirm its settings were stored.
D:This test measures a different behavior: Test the same endpoint with missing and underprivileged credentials and compare statuses. It does not establish the target outcome. For the documented fault, the direct acceptance test is: gET the returned resource to confirm its settings were stored.
Question 864
A REST API receives a valid create request and responds HTTP201 with a new resource identifier. During troubleshooting: A monitoring rule declares the operation failed because it expects only HTTP200 after POST. Which underlying cause best explains the recorded behavior?
- HTTP201 is a valid successful resource-creation status, distinct from an error.
- The identity is authenticated but lacks required authorization, rather than merely needing a new token.
- The solution relies on browser presentation instead of the supported controller API.
- HTTP success indicates the request completed, not that a specific desired record exists.
Explanation
Correct Answer
A:The actual technical cause is: HTTP201 is a valid successful resource-creation status, distinct from an error. It specifically explains the observation: a monitoring rule declares the operation failed because it expects only HTTP200 after POST. The correcting configuration is: interpret HTTP201 Created and verify the returned location/id identifies the created resource.
Incorrect Answers
B:That diagnosis is supported by a different symptom: The client repeatedly reauthenticates but still cannot invoke a privileged API. Here the recorded observation is: a monitoring rule declares the operation failed because it expects only HTTP200 after POST. The applicable cause is: hTTP201 is a valid successful resource-creation status, distinct from an error.
C:That diagnosis is supported by a different symptom: A script fails after a UI redesign because it scraped page text rather than a stable API contract. Here the recorded observation is: a monitoring rule declares the operation failed because it expects only HTTP200 after POST. The applicable cause is: hTTP201 is a valid successful resource-creation status, distinct from an error.
D:That diagnosis is supported by a different symptom: An operator marks device discovery successful based only on HTTP200 despite no matching device record. Here the recorded observation is: a monitoring rule declares the operation failed because it expects only HTTP200 after POST. The applicable cause is: hTTP201 is a valid successful resource-creation status, distinct from an error.
Question 865
A REST API receives a valid create request and responds HTTP201 with a new resource identifier. The initial change is: Interpret HTTP201 Created and verify the returned location/id identifies the created resource. Which continuing control most directly prevents a recurrence of the documented problem: A monitoring rule declares the operation failed because it expects only HTTP200 after POST.
- Handle documented 2xx response codes appropriately per method and endpoint.
- Add schema and resource-presence assertions to REST inventory automation.
- Handle status-dependent response bodies rather than calling JSON decoding unconditionally.
- Troubleshoot identity, permissions and scopes using both HTTP codes and audit logs.
Explanation
Correct Answer
A:The continuing protective control is: Handle documented 2xx response codes appropriately per method and endpoint. This addresses the underlying failure mechanism: hTTP201 is a valid successful resource-creation status, distinct from an error. The corresponding operational check is: gET the returned resource to confirm its settings were stored.
Incorrect Answers
B:That control reduces a separate risk: HTTP success indicates the request completed, not that a specific desired record exists. For the described design, the recurring risk arises from: hTTP201 is a valid successful resource-creation status, distinct from an error. The specific required safeguard is: handle documented 2xx response codes appropriately per method and endpoint.
C:That control reduces a separate risk: The client mistakes a valid empty 204 response for an unsuccessful operation. For the described design, the recurring risk arises from: hTTP201 is a valid successful resource-creation status, distinct from an error. The specific required safeguard is: handle documented 2xx response codes appropriately per method and endpoint.
D:That control reduces a separate risk: The identity is authenticated but lacks required authorization, rather than merely needing a new token. For the described design, the recurring risk arises from: hTTP201 is a valid successful resource-creation status, distinct from an error. The specific required safeguard is: handle documented 2xx response codes appropriately per method and endpoint.
Question 866
An API returns HTTP204 after successful DELETE of a temporary device tag, and an engineer retries because there is no JSON body. The incident evidence is: Repeated DELETE attempts occur because the client demands a JSON body on every success. Which targeted configuration or design change best addresses the failure?
- Differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403).
- Treat HTTP204 No Content as a successful bodyless response when the API documents it.
- Inspect both the success status and the actual payload fields before deciding the requested device exists.
- Limit concurrent API requests and use response-aware retry/backoff rather than blind rapid retries.
Explanation
Correct Answer
B:The required correction is: Treat HTTP204 No Content as a successful bodyless response when the API documents it. The underlying failure mechanism is: The client mistakes a valid empty 204 response for an unsuccessful operation. Verify success by carrying out this direct test: gET the resource after deletion and verify the tag is absent.
Incorrect Answers
A:Differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403) would not address the need for treat HTTP204 No Content as a successful bodyless response when the API documents it.
C:Inspecting both the success status and the actual payload fields would not address the need for treat HTTP204 No Content as a successful bodyless response when the API documents it.
D:Limiting concurrent API requests and using response-aware retry/backoff rather than blind rapid retries would not address the need for treat HTTP204 No Content as a successful bodyless response when the API documents it.
Question 867
An API returns HTTP204 after successful DELETE of a temporary device tag, and an engineer retries because there is no JSON body. The proposed remedy is: Treat HTTP204 No Content as a successful bodyless response when the API documents it. Which observation would most directly confirm that remedy works as intended?
- Validate the response list contains a matching identifier from a known-inventory test.
- Test the same endpoint with missing and underprivileged credentials and compare statuses.
- Load-test one safe endpoint and inspect controller error/rate-limiting responses.
- GET the resource after deletion and verify the tag is absent.
Explanation
Correct Answer
D:The decisive acceptance observation is: GET the resource after deletion and verify the tag is absent. This tests the working mechanism, while the original incident was: repeated DELETE attempts occur because the client demands a JSON body on every success.
Incorrect Answers
A:This test measures a different behavior: Validate the response list contains a matching identifier from a known-inventory test. It does not establish the target outcome. For the documented fault, the direct acceptance test is: gET the resource after deletion and verify the tag is absent.
B:This test measures a different behavior: Test the same endpoint with missing and underprivileged credentials and compare statuses. It does not establish the target outcome. For the documented fault, the direct acceptance test is: gET the resource after deletion and verify the tag is absent.
C:This test measures a different behavior: Load-test one safe endpoint and inspect controller error/rate-limiting responses. It does not establish the target outcome. For the documented fault, the direct acceptance test is: gET the resource after deletion and verify the tag is absent.
Question 868
An API returns HTTP204 after successful DELETE of a temporary device tag, and an engineer retries because there is no JSON body. During troubleshooting: Repeated DELETE attempts occur because the client demands a JSON body on every success. Which underlying cause best explains the recorded behavior?
- HTTP success indicates the request completed, not that a specific desired record exists.
- Client concurrency/rate handling exceeds permitted API processing limits.
- The client mistakes a valid empty 204 response for an unsuccessful operation.
- The identity is authenticated but lacks required authorization, rather than merely needing a new token.
Explanation
Correct Answer
C:The actual technical cause is: The client mistakes a valid empty 204 response for an unsuccessful operation. It specifically explains the observation: repeated DELETE attempts occur because the client demands a JSON body on every success. The correcting configuration is: treat HTTP204 No Content as a successful bodyless response when the API documents it.
Incorrect Answers
A:That diagnosis is supported by a different symptom: An operator marks device discovery successful based only on HTTP200 despite no matching device record. Here the recorded observation is: repeated DELETE attempts occur because the client demands a JSON body on every success. The applicable cause is: the client mistakes a valid empty 204 response for an unsuccessful operation.
B:That diagnosis is supported by a different symptom: The controller answers HTTP429 to repeated bursts while the client keeps hammering it. Here the recorded observation is: repeated DELETE attempts occur because the client demands a JSON body on every success. The applicable cause is: the client mistakes a valid empty 204 response for an unsuccessful operation.
D:That diagnosis is supported by a different symptom: The client repeatedly reauthenticates but still cannot invoke a privileged API. Here the recorded observation is: repeated DELETE attempts occur because the client demands a JSON body on every success. The applicable cause is: the client mistakes a valid empty 204 response for an unsuccessful operation.
Question 869
An API returns HTTP204 after successful DELETE of a temporary device tag, and an engineer retries because there is no JSON body. The initial change is: Treat HTTP204 No Content as a successful bodyless response when the API documents it. Which continuing control most directly prevents a recurrence of the documented problem: Repeated DELETE attempts occur because the client demands a JSON body on every success.
- Troubleshoot identity, permissions and scopes using both HTTP codes and audit logs.
- Handle status-dependent response bodies rather than calling JSON decoding unconditionally.
- Control request concurrency and audit safe idempotency of modifying operations.
- Add schema and resource-presence assertions to REST inventory automation.
Explanation
Correct Answer
B:The continuing protective control is: Handle status-dependent response bodies rather than calling JSON decoding unconditionally. This addresses the underlying failure mechanism: the client mistakes a valid empty 204 response for an unsuccessful operation. The corresponding operational check is: gET the resource after deletion and verify the tag is absent.
Incorrect Answers
A:That control reduces a separate risk: The identity is authenticated but lacks required authorization, rather than merely needing a new token. For the described design, the recurring risk arises from: the client mistakes a valid empty 204 response for an unsuccessful operation. The specific required safeguard is: handle status-dependent response bodies rather than calling JSON decoding unconditionally.
C:That control reduces a separate risk: Client concurrency/rate handling exceeds permitted API processing limits. For the described design, the recurring risk arises from: the client mistakes a valid empty 204 response for an unsuccessful operation. The specific required safeguard is: handle status-dependent response bodies rather than calling JSON decoding unconditionally.
D:That control reduces a separate risk: HTTP success indicates the request completed, not that a specific desired record exists. For the described design, the recurring risk arises from: the client mistakes a valid empty 204 response for an unsuccessful operation. The specific required safeguard is: handle status-dependent response bodies rather than calling JSON decoding unconditionally.
Question 870
An API returns HTTP403 for a valid-looking token while HTTP401 occurs when no token is supplied. The incident evidence is: The client repeatedly reauthenticates but still cannot invoke a privileged API. Which targeted configuration or design change best addresses the failure?
- Treat HTTP204 No Content as a successful bodyless response when the API documents it.
- Differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403).
- Interpret HTTP201 Created and verify the returned location/id identifies the created resource.
- Implement the supported API token lifecycle including expiry detection and authorized token refresh.
Explanation
Correct Answer
B:The required correction is: Differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403). The underlying failure mechanism is: The identity is authenticated but lacks required authorization, rather than merely needing a new token. Verify success by carrying out this direct test: test the same endpoint with missing and underprivileged credentials and compare statuses.
Incorrect Answers
A:Treat HTTP204 No Content as a successful bodyless response when the API documents it would not address the need for differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403).
C:Interpreting HTTP201 Created and verifying the returned location/id identifies the created resource would not address the need for differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403).
D:Implementing the supported API token lifecycle including expiry detection and authorized token refresh would not address the need for differentiate authentication failure (401) from an authenticated-but-forbidden permission decision (403).
Implementing Cisco Enterprise Network Core Technologies (ENCOR) (350-401) Practice Tests