Cisco Certified DevNet Associate 200-901 Updated Exam

A – E, B – D, C – B, D – C, E – A, F – F

The Ansible script provided configures the following:

GigabitEthernet0/1 is set as a trunk port with VLANs 6-8 allowed.

GigabitEthernet0/2 and GigabitEthernet0/3 are access ports assigned to VLAN 6.

GigabitEthernet0/4 is an access port for VLAN 7.

GigabitEthernet0/5 is an access port for VLAN 8.

Thus, the correct interpretations are: B. Traffic from ports 0/2 to 0/5 can flow on port 0/1 due to the trunk. D. GigabitEthernet0/2 and GigabitEthernet0/3 are access ports for VLAN 6.

A 401 Unauthorized error indicates that the request has not been applied because it lacks valid authentication credentials for the target resource. To resolve this error when making an HTTP GET request to retrieve data using RESTCONF on a CSR 1000V, you need to ensure that the correct authentication credentials (username and password) are provided.

When users cannot access a web server and the captured traffic shows an ICMP packet that reports "communication administratively prohibited," it indicates that there is a filtering device along the path, such as a router or firewall, that is intentionally blocking the traffic. This usually happens because of an access control list (ACL) that is set to deny the traffic to the webserver.

Access Control Lists (ACLs): ACLs are used in networking to control the flow of traffic into or out of a network. They can be configured on routers, firewalls, or other devices to allow or deny traffic based on IP addresses, protocols, ports, and other criteria.

ICMP Messages: ICMP (Internet Control Message Protocol) is used by network devices to send error messages and operational information. The "communication administratively prohibited" message specifically indicates that a device along the path has been configured to block the traffic.

Troubleshooting Steps:

Check ACL Configuration: Verify the ACL settings on all devices along the path to ensure that they are not blocking the required traffic.

Review Network Device Logs: Check logs on routers and firewalls for entries that match the blocked traffic.

Modify ACLs: If an ACL is found to be blocking the traffic, modify it to allow the required traffic to pass through.

References:

Cisco Documentation on ACLs: Access Control Lists

Cisco ICMP Overview: ICMP Messages