200-901 Question 71

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A3

  First off, this is a junk question filled with "gotchas". Yes, they're doing a POST when the API docs say it should be a get. If that was really the problem, we'd be getting a 400 Bad Request. When an API is designed properly to require authentication/authorization, a 401 takes precedence over a 400. You don't want randos bombing your API with bad requests looking for weaknesses. Auth/auth happens first. Both A and C would produce a 401, as demonstrated by others. In the absence of information suggesting otherwise, that leaves A as the most plausible since we know it produces a 401, and there's no indication that enough time has passed for the token to be expired.

• Chose A2

  A is correct. I had this exact problem when I was doing the Webex labs in the devnet course. I left "Bearer: " out of the token string and it returned a 401 error. When I added that to the token string, it worked.

• 1

  C. Is correct. for the 401 response