Cisco Meraki (20%)

ENAUTO · 60 questions

• A retail chain's Meraki alert service misbehaves in production: informational notices reach the pager, and a sender retry opens a second ticket for one incident. The team wants tickets only for the alert types enabled in Dashboard, each naming the affected device's serial. Which payload fields should the parser read to fix the service?
• A Python receiver in a warehouse collects Meraki alerts into an incident log. The HTTP server in Dashboard was set up with a shared secret, and every POST body carries that secret with alertType, networkId and sentAt. Which validation should the webhook handler run before it saves the alert?
• A retail chain scripts Meraki port changes for 120 stores with Python, needing secure calls, correct endpoint routing, and handling of busy-hour throttling. Which Dashboard API practice covers authentication, base URL and rate limits?
• You are syncing a Meraki organization from Python: the update to an existing wireless network must be idempotent so a second run cannot apply it twice, and the new Shenzhen network must be registered through the organization's network collection. Which HTTP method mapping should the script use?
• A provisioning engineer is writing a reusable Python function that adds branch networks to a Meraki organization for a growing chain of clinics. Each branch will run wireless access points and a security appliance, so the function has to ask Dashboard for those product lines as it creates the network. Which required parameters must every create-network request body contain?
• A hotel group is adding member Wi-Fi at a new site through the Meraki Dashboard API in Python. The build must place the SSID's clients on VLAN 20, block them from the card-payment subnet, and preserve the existing allow rule that opens everything else. Which sequence of Meraki API operations satisfies all three requirements?
• A managed service provider runs a small Python service that receives Meraki alert webhooks for the customer networks it monitors. Every delivery must be answered within a second, only alerts naming a network on the watch list may be recorded, and a malformed body must be logged instead of crashing the process. How should the receiver validate each delivery to meet all three requirements?
• A campus MX needs a new wireless SSID mapped to VLAN 40 plus an L3 firewall rule that blocks guest traffic to internal ranges, all driven from CI through the Meraki Dashboard API. The network ID and endpoint are verified, VLAN support is disabled, and the first call to create VLAN 40 returns HTTP 404. Which Meraki API step clears that VLAN creation failure?
• An engineer's script reads every network in an organization from the Meraki Dashboard API. It authenticates with a bearer token and calls the versioned base URL, but repeated runs start returning HTTP 429. Which request behavior keeps this integration within the Dashboard API rate limits?
• A mall operator wants Meraki-powered foot-traffic analytics, needing opt-in Wi-Fi probe data delivered continuously to its analytics engine without polling the cloud. Which Location Scanning API design matches purpose and delivery?
• A Python service receives Meraki alert webhooks over HTTPS. The JSON body carries the alert type, the device serial and the alert-specific details, and every outgoing team message must name both the alert type and identify the device using only the data in the payload. Which JSON parsing approach should the script use to route each Meraki webhook?
• A CI pipeline updates the syslog server settings on one existing Meraki network every night. Reruns are expected, downstream reports reference that network's permanent identifier, and the job must leave every other network in the organization untouched. Which Meraki Dashboard API request pattern should the pipeline use?
• A retail chain uses Meraki MV smart cameras to measure queue length and needs anonymized counts every minute without storing video in its analytics app. The app must scale to 40 stores and respect privacy rules for no facial data. Which MV Sense API capability delivers the required camera analytics?
• A Python script pulls every network and access point status from the Meraki Dashboard for a 60-site rollout. The first burst of calls returned HTTP 429, so the team needs a pattern that uses the documented base address, authenticates correctly, and keeps the run going. Which request pattern handles the base address, authentication and throttling together?
• A retail chain runs Meraki MR access points across 120 stores and has hired an analytics vendor that needs the raw wireless observations detected in each store, delivered continuously rather than pulled from periodic reports. The vendor only accepts data posted to an HTTPS endpoint it provides. Which Meraki capability should carry those observations to the vendor?
• Your Flask service receives Meraki alert webhooks on a public URL and must check that each alert includes the secret configured for your dashboard before it opens a ticket. Which validation should your handler perform first?
• Your Meraki network already exists in Dashboard and you have its network ID. An API change must rename it and set its timezone for that one network only, without adding a second network to the organization. Which HTTP method and endpoint perform this update on the existing network?
• A retail chain posts Meraki alert webhooks for every store network to a single Python endpoint through one configured HTTP server. Each JSON body carries sharedSecret, networkName, alertType and alertId. Only alerts from the Downtown store should page the on-call engineer, the shared secret must be checked before acting, and the endpoint replies 200 before the slow paging call runs. Which handler flow processes each incoming webhook payload correctly?
• A retailer wants foot-traffic and dwell data for its stores from the existing MR access points, covering Wi-Fi clients and Bluetooth beacon sightings. Its analytics service is an HTTPS receiver that Meraki's cloud must post to. Which Location Scanning API setup delivers the data correctly?
• A nightly Python job collects wireless client counts for every Meraki network in a large retail organization. It runs behind a corporate egress proxy that forwards only standard Authorization headers, the API answers some bursts with HTTP 429, and the report must still contain every network. Which request pattern satisfies the proxy, throttling, and completeness requirements?
• A coffee-chain operations team wants doorway area counts recorded every few seconds into its own dashboard. The stores have Meraki MV cameras but no BLE beacons, and the team will not host computer-vision models or download video. Which camera-analytics capability should they use for these doorway counts?
• A coffee shop chain offers free Wi-Fi on Meraki MR with a branded loyalty portal that must capture email before granting four-hour access and track repeat visits. The portal is hosted externally and must enforce auth per client. Which External Captive Portal API flow grants the required access?
• A Python service behind HTTPS receives Meraki alert webhooks for a warehouse network. During rollout a malformed test POST crashed the handler, and a slow path held the reply open past the sender's timeout. Which request-handling sequence for the alert webhook satisfies payload validation and timely acknowledgement?
• A script receives Meraki webhook alerts for fifteen branch networks. When an offline-device alert arrives it must page the on-call engineer with the network and device names, while repeated copies of the same delivery are ignored. Which parsing and action plan handles this alert payload best?
• A coffee chain hosts its own signup page on a company web server and points the guest SSID's splash setting to that external URL. Customers reach the form, but nobody gets online. In the Meraki external captive portal flow, which step must the hosted page perform after the customer submits the form to authorize the client?
• A retail chain wants foot-traffic analytics from its MR access points, and the analytics platform runs as an HTTPS service the team operates. The Location Scanning API must deliver observed wireless client data to that service without an analyst signing into the dashboard. Which delivery mechanism should the engineer configure for location scanning data?
• A flagship store wants hourly people counts for four in-store zones plus average occupancy per zone from its existing Meraki MV cameras, with every count produced by the cameras themselves. Which Meraki API capability delivers these zone analytics?
• An on-call engineer's small Flask service receives Meraki alert webhooks from a 300-device warehouse network. It must open a ticket only for warning and critical events, tolerate alerts that omit the device serial, and reject requests with an invalid shared secret. Which parsing and validation sequence should the handler apply to each webhook JSON body?
• A university uses Meraki webhooks to auto-open dorm Wi-Fi outage tickets. Security requires the Python receiver to prove alerts came from Meraki Dashboard, reject forged posts, and still parse device MAC and alert type. A student replayed an old alert and created a false ticket. Which webhook alert API and shared secret validation behavior should the receiver implement to authenticate Meraki posts?
• A NOC script polls Meraki Dashboard every five minutes for organization-wide appliance status and wireless client counts. It must authenticate correctly against the current API version endpoint and behave politely when requests are throttled. Which request pattern should the script follow?
• A Flask service receives Meraki webhook alerts whenever an access point goes offline. The team configured a shared secret for the webhook, so each POST carries it as a sharedSecret field in the JSON body. Anyone who finds the public URL can still post fake alerts. Which check best rejects requests that do not know the configured shared secret?
• The company hosts its own voucher splash page for guest Wi-Fi and points the SSID at it as an external captive portal. The Dashboard API key your portal uses stays on that server and must never reach the guest's device, and the client must stay blocked until the voucher checks out. Which hop sequence validates the voucher and releases the guest?
• A flagship store wants footfall numbers for one lobby camera, sampled every minute. The four counting areas are already drawn in Meraki Dashboard and your config holds their area IDs. The integration standard is to pull on demand from current, supported endpoints only. Which Meraki API request returns the per-area people counts for each sample window?
• A managed-service team writes a Python script that lists every MX and MS device across twelve customer organizations in Meraki Dashboard. The script must authenticate with an API key, call the documented endpoint, and stay under the per-organization request ceiling during a full inventory sweep. How should the script address, authenticate and throttle its Dashboard API calls?
• A managed provider onboards a retail chain with one Meraki organization, three regions, and mixed MX and MR devices per store. The automation must create isolated networks per store, assign correct device types, and preserve org-wide policies. Which organization to network hierarchy and creating a network approach should the Python script implement for clean onboarding?
• For a network configured to use the legacy Meraki Scanning API, a retail chain wants raw WiFi and Bluetooth scan observations from its Meraki access points flowing into an in-house analytics service. The developer opens the API reference looking for a REST route that returns yesterday's observations for a network, expecting a paginated list of scan records. How does the Scanning API deliver those observations to the customer's service?
• A national retail chain wants its own analytics database to hold the device observation records that Meraki MR access points collect in each store. The data team prefers a push model over dashboard polling and needs batches delivered to infrastructure they host, with no manual export step. Which delivery design matches how the Location Scanning API hands over observation data?
• Your team is writing a Python script that provisions a new branch office in the Meraki Dashboard org. The script already holds an API key and the organization ID, and the site needs an MX appliance plus MS switches. Which JSON body should the create-network request send for the Dashboard to accept it?
• A grocery chain has MV cameras above 40 store entrances and wants a dashboard showing how many people enter each minute. The cameras have MV Sense licenses, and the chain has an MQTT broker. Which Meraki analytics capability should the script use to obtain the people counts?
• A retail chain is opening twelve stores and its provisioning script must build the dashboard structure for each one. Every store needs a single network created under the existing organization with switch, wireless and appliance product types enabled so devices can be assigned later, in one call using the organization id. Which Meraki Dashboard API request creates a store network?
• A webhook receiver runs a failover script whenever Meraki Dashboard posts a port-down alert to a public endpoint, so anyone who guesses the URL can send a body. Which check best verifies that an incoming alert was signed with your Meraki webhook server's shared secret?
• A retail chain hosts its own terms-and-conditions splash page for an open guest SSID using Meraki's external captive portal. The access point has already redirected the visitor's browser to your portal with Meraki's grant parameters. Which step completes the external captive portal flow and puts the visitor online?
• A managed service provider has already created one Meraki organization for a new retail customer. The customer now needs three separate networks, one per store, each holding MX security appliances and MR access points, with its own wireless settings and VLANs. Which Meraki hierarchy and create-network request produces those three store networks?
• A hotel group wants guest Wi-Fi sign-in hosted on its own web server so it can collect a room number and marketing consent. The MR access points will redirect each guest browser to the hotel portal, and after the check the guest must land back on the controller link so access is granted. Which step carries that return handoff in the external captive portal flow?
• A retail chain registered a Meraki webhook that posts switch and access point alerts to an internal receiver. The team set a shared secret at registration, but the endpoint sits on a public URL where health checks omit the shared-secret header, the comparison must resist timing measurement, and unauthenticated bodies must stay out of the parser. Which validation sequence meets all three requirements?
• A Python script provisions a new branch site in the Meraki dashboard with requests.post, targeting /organizations/123456789/networks so the site gets an MX, an MS and an MR. The payload carries only name, timeZone and tags, and the API answers with a parameter error. Which values must the request supply for the network to be created?
• A branch office is getting a new MX appliance and one MR access point. The script must switch on VLAN support, add VLAN 72 for guests, point the Branch-Guest SSID at it, and block guest clients from reaching the 10.50.0.0/16 headquarters subnet. Which sequence of Meraki API calls should the script send to finish provisioning the branch?
• A warehouse runs Meraki MV cameras and wants a Python service that alerts the moment more than five people cross the north aisle entrance, plus a monthly report of people counts from the last 30 days, with all video staying on the cameras. Which combination of Meraki camera analytics should the team use?
• A script that manages a Meraki dashboard creates a new SSID in an existing wireless network each time it runs, so the list of SSIDs keeps growing. The script only needs to change the authentication mode of one SSID that already exists in that network. Which HTTP method and resource URL should it use to make that change?
• A new branch must be stood up with zero console clicks: one standalone Meraki network, separate from any configuration template, needs an MX layer-3 firewall rule set, an enabled SSID, and an additional switch VLAN created through the dashboard REST API in a single run. Which sequence of API calls should the script perform?
• A managed-service provider creates customer networks in Meraki Dashboard from a Python script. The token works and the POST to /organizations/{orgId}/networks carries the network name, a timezone and tags, yet the API replies with a 400 validation error. Which request body will create the network successfully?
• Several Meraki networks post alert webhooks to one internal service, and someone has begun sending look-alike events from a public test server. The receiver must prove each alert came from the configured dashboard by validating the shared secret, log the outcome, and answer quickly. Which shared-secret check should run before the receiver processes an alert?
• A boutique hotel hosts its guest Wi-Fi sign-in page on its own server and points an MX at it as an external captive portal. Meraki redirects each guest browser there before access is allowed. Which step in the external captive portal flow authorizes the guest on the network?
• An engineer automates onboarding for a new branch office in the Meraki dashboard. The account manages one organization that already holds several networks, and the new site needs both a switch and an access point from day one. The script must place the new network inside the organization hierarchy and declare its hardware up front. Which API request should the script send to create this network?
• A network engineer exposes a Python web endpoint that receives Meraki alert webhooks and starts remediation on switch ports. The endpoint is reachable from the internet, and forged or repeated deliveries must be stopped before any action runs. Which check should the script perform first to confirm the alert has the shared secret configured for their Meraki organization, before separately applying replay protection?
• A retail company is opening a fifth store, and its Meraki organization already holds four store networks with their own MX firewalls and MR access points. Automation must add the new store network through the REST API so its hardware can be assigned to it afterwards, sitting alongside the existing four in the same organization. Which API call creates the network at the correct level of the Meraki hierarchy?
• A retail chain's Meraki Dashboard posts port-down alerts to an internal service that also ingests events from two other vendors' monitoring tools. The team must confirm each alert truly came from Meraki before acting on it. Which webhook validation control should the service enforce first?
• A new Meraki WLAN for contractors must use SSID "Contractor", but the appliance has no VLAN 30 yet and the firewall rule list starts with a broad allow rule. The WLAN must run on VLAN 30 and stay clear of the internal server subnet. Which API configuration sequence for the SSID, VLAN and firewall rules delivers all three requirements?
• Your provisioning script must edit an existing appliance static route in a branch network and also add the first static route in a brand-new network through the Meraki dashboard API. The API accepts a call only when the method matches the action. Which HTTP method should the script send for each of the two tasks?
• A Python script uses the Meraki Dashboard API to create a branch network with a valid API access key and a known organization ID, and the account already manages other networks in that organization. The call returns HTTP 400 naming invalid parameters. Which request details must be present for network creation to succeed?