Cisco Certified DevNet Associate DEVASC 200-901 Official Cert Guide

Chris Jackson, CCIE No. 6256 (R&S and SEC), is a Distinguished Architect and CTO for Global Sales Training at Cisco. Chris is focused on digital transformation and showing customers how to leverage the tremendous business value Cisco technologies can provide. He is the author of Network Security Auditing (Cisco Press, 2010), CCNA Cloud CLDADM 210-455 Official Cert Guide (Cisco Press, 2016), and various online video courses for Cisco Press. He holds dual CCIEs in security and routing and switching, CISA, CISSP, ITIL v3, seven SANS certifications, and a bachelor’s degree in business administration. Residing in Franklin, Tennessee, Chris enjoys tinkering with electronics, robotics, and anything else that can be programmed to do his bidding. In addition, he is a 3rd Degree Black Belt in Taekwondo, rabid Star Wars fan, and has a ridiculous collection of Lego. His wife Piper and three children Caleb, Sydney, and Savannah are the true joy of his life and proof that not everything has to plug into a wall outlet to be fun.Jason Gooley, CCIE No. 38759 (R&S and SP), is a very enthusiastic and spontaneous person who has more than 20 years of experience in the industry. Currently, Jason works as a Technical Evangelist for the Worldwide Enterprise Networking Sales team at Cisco Systems. Jason is very passionate about helping others in the industry succeed. In addition to being a Cisco Press author, Jason is a distinguished speaker at Cisco Live, contributes to the development of the Cisco CCIE and DevNet exams, provides training for Learning@Cisco, is an active CCIE mentor, is a committee member for the Cisco Continuing Education Program (CE), and is a program committee member of the Chicago Network Operators Group (CHI-NOG), www.chinog.org. Jason also hosts a show called “MetalDevOps.” Jason can be found at www.MetalDevOps.com, @MetalDevOps, and @Jason_Gooley on all social media platforms.Adrian Iliesiu, CCIE No. 43909 (R&S), is a network engineer at heart with more than 15 years of professional IT experience. Currently, Adrian works as a Technical Leader with the Cisco DevNet Co-Creations team. During his career, Adrian has worked in several roles, including team leader and network, systems, and QA engineer across multiple industries and international organizations. When not working on innovative projects with customers and partners, Adrian advocates the advantages of network programmability and automation with a focus on enterprise and data center infrastructure. He is an established blog author, distinguished speaker at Cisco Live, and a recipient of the coveted Cisco Pioneer award. Adrian also appeared on Cisco TechWiseTV, Cisco Champion podcasts, and DevNet webinars. He holds a bachelor’s degree in Electronics and Telecommunications from Technical University of Cluj-Napoca and a master’s degree in Telecommunication Networks from Politehnica University of Bucharest.Ashutosh Malegaonkar is a Cisco Distinguished Engineer, a senior technical contributor, and an industry thought leader. His experience spans across different technology domains: ISR Platforms, Voice, Video, Search, Video Analytics, and Cloud. Over two decades at Cisco, he has done two startups and has won several accolades, including the Pioneer awards. He has delivered several keynotes and talks at Cisco Connect and Cisco Live. He has also been a Tech Field Day Speaker. With more than 25 years of professional experience, he currently leads the DevNet Co-Creations team whose mission is to co-create, innovate, and inspire alongside our strategic customers, partners, and developers. Ashutosh inspires those around him to innovate, and he is continually developing creative new ways to use software and Cisco APIs to solve real problems for our customers. He has a deep understanding of the breadth of Cisco products and technologies and where they can best be applied to serve our customers. Ashutosh has 16 approved patents and two publications.

• Introduction xxvChapter 1 Introduction to Cisco DevNet Associate Certification 2Do I Know This Already? 2Foundation Topics 3Why Get Certified 3Cisco Career Certification Overview 6Cisco DevNet Certifications 11Cisco Certified DevNet Associate Certification (DEVASC) 12Cisco Certified DevNet Professional Certification 13Cisco DevNet Overview 14Discover 15Technologies 15Community 16Support 17Events 17DevNet Automation Exchange 18Summary 20Chapter 2 Software Development and Design 22“Do I Know This Already?” Quiz 22Foundation Topics 25Software Development Lifecycle 25Waterfall 27Lean 28Agile 29Common Design Patterns 30Model-View-Controller (MVC) Pattern 30Observer Pattern 31Linux BASH 32Getting to Know BASH 32Directory Navigation 35cd 35pwd 35ls 36mkdir 36File Management 36mv 37rm 37touch 37cat 37Environment Variables 37Software Version Control 38Git 39Understanding Git 40Using Git 42Cloning/Initiating Repositories 42Adding and Removing Files 43Committing Files 45Pushing and Pulling Files 45Working with Branches 47Merging Branches 50Handling Conflicts 52Comparing Commits with diff 53Conducting Code Review 55Exam Preparation Tasks 55Review All Key Topics 56Define Key Terms 56Chapter 3 Introduction to Python 58“Do I Know This Already?” Quiz 58Foundation Topics 60Getting Started with Python 60Understanding Python Syntax 63Data Types and Variables 66Variables 66Data Types 67Integers, Floating Point, and Complex Numbers 68Booleans 70Strings 70Lists 72Tuples 74Dictionaries 75Sets 76Input and Output 77Getting Input from the User 77The Mighty print() Function 77Flow Control with Conditionals and Loops 78If Statements 79For Loops 80While Loops 82Exam Preparation Tasks 83Review All Key Topics 83Define Key Terms 84Additional Resources 84Chapter 4 Python Functions, Classes, and Modules 86“Do I Know This Already?” Quiz 86Foundation Topics 88Python Functions 88Using Arguments and Parameters 89Object-Oriented Programming and Python 91Python Classes 92Creating a Class 92Methods 93Inheritance 94Working with Python Modules 96Importing a Module 97The Python Standard Library 99Importing Your Own Modules 100Useful Python Modules for Cisco Infrastructure 101Exam Preparation Tasks 104Review All Key Topics 104Define Key Terms 105Chapter 5 Working with Data in Python 106“Do I Know This Already?” Quiz 106Foundation Topics 108File Input and Output 108Parsing Data 110Comma-Separated Values (CSV) 110JavaScript Object Notation (JSON) 113Extensible Markup Language (XML) 115YAML Ain't Markup Language (YAML) 117Error Handling in Python 119Test-Driven Development 121Unit Testing 122Exam Preparation Tasks 126Review All Key Topics 126Define Key Terms 127Additional Resources 127Chapter 6 Application Programming Interfaces (APIs) 128“Do I Know This Already?” Quiz 128Foundation Topics 130Application Programming Interfaces (APIs) 130Northbound APIs 130Southbound APIs 130Synchronous Versus Asynchronous APIs 131Representational State Transfer (REST) APIs 132RESTful API Authentication 133Basic Authentication 134API Keys 134Custom Tokens 135Simple Object Access Protocol (SOAP) 136Remote-Procedure Calls (RPCs) 140Exam Preparation Tasks 142Review All Key Topics 142Define Key Terms 142Chapter 7 RESTful API Requests and Responses 144“Do I Know This Already?” Quiz 144Foundation Topics 146RESTful API Fundamentals 146API Types 146API Access Types 147HTTP Basics 148Uniform Resource Locator (URL) 149Method 150REST Methods and CRUD 150Deep Dive into GET and POST 151HTTP Headers 152Request Headers 153Response Headers 153Response Codes 154XML 155JSON 156YAML 157Webhooks 158Tools Used When Developing with Webhooks 158Sequence Diagrams 159REST Constraints 160Client/Server 160Stateless 161Cache 161Uniform Interface 161Layered System 162Code on Demand 162REST API Versioning 162Pagination 162Rate Limiting and Monetization 163Rate Limiting on the Client Side 164REST Tools 164Postman 165curl 168HTTPie 169Python Requests 171REST API Debugging Tools for Developing APIs 172Exam Preparation Tasks 172Review All Key Topics 172Define Key Terms 173Chapter 8 Cisco Enterprise Networking Management Platforms and APIs 174“Do I Know This Already?” Quiz 174Foundation Topics 176What Is an SDK? 176Cisco Meraki 178Cisco DNA Center 189Cisco SD-WAN 201Exam Preparation Tasks 212Review All Key Topics 212Define Key Terms 212Chapter 9 Cisco Data Center and Compute Management Platforms andAPIs 214“Do I Know This Already?” Quiz 214Foundation Topics 216Cisco ACI 216Building Blocks of Cisco ACI Fabric Policies 220APIC REST API 223UCS Manager 230Cisco UCS Director 239Cisco Intersight 246Exam Preparation Tasks 252Review All Key Topics 252Define Key Terms 253Chapter 10 Cisco Collaboration Platforms and APIs 254“Do I Know This Already?” Quiz 255Foundation Topics 257Introduction to the Cisco Collaboration Portfolio 257Unified Communications 257Cisco Webex Teams 258Cisco Unified Communications Manager (Unified CM) 259Unified Contact Center 259Cisco Webex 260Cisco Collaboration Endpoints 260API Options in the Cisco Collaboration Portfolio 261Webex Teams API 261API Authentication 262Personal Access Tokens 262Integrations 263Bots 271Guest Issuer 272Webex Teams SDKs 273Cisco Finesse 274Cisco Finesse API 275API Authentication 276Finesse User APIs 277Finesse Team APIs 279Dialog APIs 279Finesse Gadgets 281Webex Meetings APIs 281Authentication 283Integration API Keys 283Webex XML APIs 284Creating a New Meeting 284Listing All My Meetings Meeting 286Setting or Modifying Meeting Attributes 287Deleting a Meeting 288Webex Devices 289xAPI 290xAPI Authentication 290xAPI Session Authentication 291Creating a Session 291Getting the Current Device Status 291Setting Device Attributes 292Registering an Event Notification Webhook 293Room Analytics People Presence Detector 294Cisco Unified Communications Manager 294Administrative XML 294Cisco AXL Toolkit 295Accessing the AXL SOAP API 296Using the Zeep Client Library 296Using the CiscoAXL SDK 297Exam Preparation Tasks 298Review All Key Topics 298Define Key Terms 298Chapter 11 Cisco Security Platforms and APIs 300“Do I Know This Already?” Quiz 301Foundation Topics 302Cisco's Security Portfolio 302Potential Threats and Vulnerabilities 303Most Common Threats 303Cisco Umbrella 304Understanding Umbrella 304Cisco Umbrella APIs 305Authentication 306Cisco Firepower 314Firepower Management Center APIs 315Cisco Advanced Malware Protection (AMP) 320Listing All Computers 323Listing All Vulnerabilities 323Cisco Identity Services Engine (ISE) 326ISE REST APIs 327ERS API Authentication 328Creating an Endpoint Group 329Creating an Endpoint and Adding It to a Group 330Other ISE APIs 331Cisco Threat Grid 331Threat Grid APIs 332Threat Grid API Format 332API Keys 333Who Am I 333The Data, Sample, and IOC APIs 334Feeds 335Exam Preparation Tasks 337Review All Key Topics 337Define Key Terms 338Chapter 12 Model-Driven Programmability 340“Do I Know This Already?” Quiz 340Foundation Topics 342NETCONF 343YANG 347RESTCONF 367Model-Driven Telemetry 371Exam Preparation Tasks 372Review All Key Topics 372Define Key Terms 372Chapter 13 Deploying Applications 374“Do I Know This Already?” Quiz 374Foundation Topics 376Application Deployment Models 376NIST Definition 376Essential Characteristics 377Service Models 378Application Deployment Options 379Private Cloud 379Public Cloud 379Hybrid Cloud 380Community Cloud 381Edge and Fog Computing 381Application Deployment Methods 382Bare-Metal Application Deployment 382Virtualized Applications 383Cloud-Native Applications 384Containerized Applications 384Serverless 386DevOps 388What Is DevOps? 390Putting DevOps into Practice: The Three Ways 391First Way: Systems and Flow 391Second Way: Feedback Loop 392Third Way: Continuous Experimentation and Learning 393DevOps Implementation 394Docker 398Understanding Docker 398Namespaces 398Cgroups 399Union File System 399Docker Architecture 400Using Docker 401Working with Containers 403Dockerfiles 410Docker Images 411Docker Hub 414Exam Preparation Tasks 419Review All Key Topics 419Define Key Terms 419Additional Resources 419Chapter 14 Application Security 420“Do I Know This Already?” Quiz 420Foundation Topics 422Identifying Potential Risks 422Common Threats and Mitigations 423Open Web Application Security Project 424Using Nmap for Vulnerability Scanning 426Basic Nmap Scan Against an IP Address or a Host 427CVE Detection Using Nmap 427Protecting Applications 429Tiers of Securing and Protecting 430Encryption Fundamentals 431Public Key Encryption 431Data Integrity (One-Way Hash) 432Digital Signatures 432Data Security 433Secure Development Methods 434Securing Network Devices 437Firewalls 437Intrusion Detection Systems (IDSs) 439Intrusion Prevention Systems (IPSs) 440Domain Name System (DNS) 440Load Balancing 443Exam Preparation Tasks 446Review All Key Topics 446Define Key Terms 447Chapter 15 Infrastructure Automation 448“Do I Know This Already?” Quiz 449Foundation Topics 451Controller Versus Device-Level Management 451Infrastructure as Code 454Continuous Integration/Continuous Delivery Pipelines 455Automation Tools 458Ansible 458Puppet 462Chef 465Cisco Network Services Orchestrator (NSO) 467Cisco Modeling Labs/Cisco Virtual Internet Routing Laboratory (CML/VIRL) 474Python Automated Test System (pyATS) 476Exam Preparation Tasks 479Review All Key Topics 479Define Key Terms 480Chapter 16 Network Fundamentals 482“Do I Know This Already?” Quiz 482Foundation Topics 484Network Reference Models 484The OSI Model 484The TCP/IP Model 488Switching Concepts 492Ethernet 492MAC Addresses 493Virtual Local-Area Networks (VLANs) 494Switching 495Routing Concepts 496IPv4 Addresses 496IPv6 Addresses 501Routing 504Exam Preparation Tasks 507Review All Key Topics 507Define Key Terms 508Chapter 17 Networking Components 510“Do I Know This Already?” Quiz 510Foundation Topics 512What Are Networks? 512Elements of Networks 516Hubs 517Bridges 517Switches 518Virtual Local Area Networks (VLANs) 520Routers 521Routing in Software 522Functions of a Router 524Network Diagrams: Bringing It All Together 526Software-Defined Networking 526SDN Controllers 529Cisco Software-Defined Networking (SDN)