Cisco 350-901 Exam Dumps

Cisco 350-901 Sample Question Answers

Question # 1

What is a benefit of implementing a Cl pipeline? 

A. enforces version control  
B. enables a faster feedback loop  
C. ensures that tests are written before code is written  
D. decreases external dependencies  

Show Answer

Question # 2

Which configuration stop must be performed on a Cisco IOS XE device to present collecteddata in Cisco DNA Center?

A. Create an SNMPv3 user account.  
B. Apply a telemetry profile.  
C. Synchronize the device and the data collector.  
D. Enable Cisco NetFlow collection.  

Show Answer

Question # 3

A team of developers created their own CA and started signing certificates for all of theirloT devices, Which action will make the browseraccept these certificates?

A. Set the private keys 1024-bit RSA.  
B. Preload the developer CA on the trusted CA list of the browser.  
C. Enable HTTPS or port 443 on the browser.  
D. install a TLS instead of SSL certificate on the loT devices.  

Show Answer

Question # 4

What is a benefit of continuous testing? 

A. decreases the frequency of code check-ins  
B. removes the requirement for test environments  
C. enables parallel testing  
D. increases the number of bugs found in production  

Show Answer

Question # 5

A developer has created an application based on customer requirements. The customerneeds to run the application with the minimum downtime. Which design approach regardinghigh-availability applications, Recovery Time Objective, and Recovery Point Objective mustbe taken?

A. Active/passive results in lower RTO and RPO. For RPO, data synchronization betweenthe two data centers must be timely to allow seamless request flow. 
B. Active/passive results in lower RTO and RPO. For RPO, data synchronization betweenthe two data centers does not need to be timely to allow seamless request flow. 
C. Active/active results in lower RTO and RPO. For RPO, data synchronization betweenthe two data centers does not need to be timely to allow seamless request flow. 
D. Active/active results in lower RTO and RPO. For RPO, data synchronization betweenthe two data centers must be timely to allow seamless request flow.  

Show Answer

Question # 6

An application is developed in order to communicate with Cisco Webex. For reporting, theapplication must retrieve all the messages sent to a Cisco Webex room on a monthly basis.Which action calls /v1/messages directly?

A. Set up a webhook that has messages as the resource type and store the results locally.  
B. Utilize the pagination functionality by defining the max property.  
C. Recursively call the /vl/messages endpoint by using the beforeMessage property.  
D. Filter the response results by specifying the created property in the request.  

Show Answer

Question # 7

What is the unique identifier in the 0Auth2 three-legged authorization code flow? 

A. client ID  
B. resource server  
C. resource owner  
D. authorization server  

Show Answer

Question # 8

Which transport layer protocol does gRPC use to retrieve telemetry information? 

A. SSH  
B. SNMP  
C. TCP  
D. HTTP/2  

Show Answer

Question # 9

Which two statements are considered best practices according to the 12-factor appmethodology for application design? (Choose two.)

A. Application code writes its event stream to stdout.  
B. Application log streams are archived in multiple replicated databases.  
C. Application log streams are sent to log indexing and analysis systems.  
D. Application code writes its event stream to specific log files.  
E. Log files are aggregated into a single file on individual nodes.  

Show Answer

Question # 10

A container running a Python script is failing when it reaches the integration testing phaseof the CI/CD process. The code has been reviewed thoroughly and the build process workson this container and all other containers pass unit and integration testing.What should be verified to resolve the issue?

A. that the correct port is exposed in the Dockerfile  
B. that the necessary modules and packages are installed on build  
C. that the script is running from the right directory  
D. that the Python version of the container image is correct  

Show Answer

Question # 11

Refer to the exhibit , The command docker build -tag=friendlyhello . is run to build a dockerimage from the given Dockerfile,requirements,txt, and app.py, Then the command docker run -p 4000:80 friendlyhello isexecuted to run the application. Which URL is entered in the web browser to see thecontent served by the application?

A. http://localhost:4000
B. http ://localhost:80 
C. http ://127.0.0.1:80 
D. http:///4000:80 

Show Answer

Question # 12

A developer has issued git add file1 and file2 test.py command to add the three files for thenext commit, but then decides to executed test.py from this command. Which commandneeds to be used to exclude test.py from this commit but keep the rest of the files?

A. git clean — test.py  
B. git reset - test py  
C. git checkout - file1 file2  
D. git stash -- file1 file 2  

Show Answer

Question # 13

AppGigabitEthernet interface is used as data port for a container on a Cisco Catalyst 9000Series Switch. Which two interface configuration options should be used? (Choose two.)

A. trunk interface  
B. bridged virtual interface  
C. SPAN port  
D. management interface  
E. subinterface  

Show Answer

Question # 14

Which two situations are flagged by software tools designed for dependency checking incontinuous integration environments, such as OWASP? (Choose two.)

A. publicly disclosed vulnerabilities related to the included dependencies  
B. mismatches in coding styles and conventions in the included dependencies  
C. incompatible licenses in the included dependencies  
D. test case failures introduced by bugs in the included dependencies  
E. buffer overflows to occur as the result of a combination of the included dependencies  

Show Answer

Question # 15

A custom dashboard of the network health must be created by using Cisco DNA CenterAPIs An existing dashboard is a RESTful API that receives data from Cisco DNA Center asa new metric every time the network health information is sent from the script to thedashboard Which set of requests creates the custom dashboard?

A. PUT request to Cisco DNA Center to obtain the network health information and then aPOST request to the dashboard to publish the new metric 
B. POST request to Cisco DNA Center to obtain the network health information and then aGET request to the dashboard to publish the new metric 
C. GET request to Cisco DNA Center to obtain the network health information and then aPUT request to the dashboard to publish the new metric
D. GET request to Cisco DNA Center to obtain the network health information and then aPOST request to the dashboard to publish the new metric 

Show Answer

Question # 16

A developer deploys a web application in a local data center that is now experiencing hightraffic load from users accessing data through REST API calls. Which approach enhancesthe responsiveness and performance of the API?

A. Use HTTP POST or other non-read methods for read requests when possible  
B. Ensure that all read requests are clearly identified by the PUT method  
C. Configure API payload to return errors in HTTP 200 responses  
D. Use HTTP standard authorization header to submit authentication credentials  

Show Answer

Question # 17

When end-to-end encryption is implemented, which area is most vulnerable to exploitation? 

A. cryptographic key exchange  
B. endpoint security  
C. cryptographic key generation  
D. security of data in transit  

Show Answer

Question # 18

How does the use of release packaging allow dependencies to be effectively managedduring deployments?

A. dependencies are staggered between multiple releases  
B. designed to prevent any dependencies between release units  
C. dependencies are tested after the release is deployed  
D. removal of release units if they have issues in testing  

Show Answer

Question # 19

What is the gRPC Network Management Interface protocol? 

A. a unified management protocol for streaming telemetry and database logging  
B. a configuration management protocol for monitoring  
C. a protocol for configuration management and streaming telemetry  
D. a logging protocol used across database servers  

Show Answer

Question # 20

A developer in a learn of distributed authors is working on code in an isolated Git branchnamed 'update4a2f5464771 The developer attempts to merge the new code with a branchnamed ’dvcapp2a3f1564733' however the merge operation encounters a conflict errorduring the process. Which Git command must the developer use to exit from the mergeprocess and return the branch to the previous state?

A. git merge -exit  
B. git merge -abort  
C. git abort —merge  
D. git abort -status  

Show Answer

Question # 21

Which database type should be used to store data received from model-driven telemetry? 

A. BigQuery database  
B. Time series database  
C. NoSQL database  
D. PostgreSQL database  

Show Answer

Question # 22

An organization manages a large cloud-deployed application that employs a microservicesarchitecture. No notable issues occur with downtime because the services of thisapplication are redundantly deployed over three or more data center regions. However,several times a week reports are received about application slowness. The containerorchestration logs show faults in a variety of containers that cause them to fail and thenspin up brand new.Which action must be taken to improve the resiliency design of the application whilemaintaining current scale?

A. Update the base image of the containers.  
B. Test the execution of the application with another cloud services platform.  
C. Increase the number of containers running per service.  
D. Add consistent “try/catch(exception)” clauses to the code.  

Show Answer

Question # 23

When an application is designed that requires high availability, what is a reason to use a cross-region cloud?

A. Provide disaster recovery protection  
B. Protect from a single component failure  
C. Minimize costs  
D. Account for failure in another zone  

Show Answer

Question # 24

What are two features of On-Box Python for hosting an application on a network device? (Choose two.) 

A. It has direct access to Cisco IOS XE CLI commands.  
B. It is a Python interpreter installed inside the guest shell.  
C. It enables execution of XML scripts on a Cisco IOS XE router or switch.  
D. It supports Qt for graphical interfaces and dashboards.  
E. It has access to Cisco IOS XE web UI through a controller.  

Show Answer

Question # 25

Which function does Fluentd fulfill for application logging in Kubernetes? 

A. logging agent for distribution  
B. backend time series database storage  
C. monitoring and log visualization  
D. messaging queueig infrastructure  

Show Answer

Question # 26

Why is end-to-end encryption deployed when exposing sensitive data through APIs? 

A. Traffic is encrypted and decrypted at every hop in the network path.  
B. Data transfers are untraceable from source to destination.  
C. Data cannot be read or modified other than by the true source and destination.  
D. Server-side encryption enables the destination to control data protection.  

Show Answer

Question # 27

A developer IS deploying an action to automate the configuration and management ofCisco network switches and routers. The application must use REST API interlace toachieve programmability. The security team mandates that the network must be protectedagainst DDoS attacks. What mitigates the attacks without impacting genuine requests?

A. traffic routing on the network perimeter  
B. firewall on the network perimeter  
C. API rate limiting at the application layer  
D. IP address filtering at the application layer  

Show Answer

Question # 28

An engineer must enable an SSID in a Meraki network. Which request accomplishes this task? 

A. PUT /networks/{networkld}/ssids/{number} {"enable": true)  
B. POST /networks/{networkid}/ssids/{number) {"enable": true)  
C. PUT /networks/{networkld}/ssids/{number}?enabled=true  
D. POST /networks/{networkid}/sslds/{number}?enabled=true  

Show Answer

Question # 29

A client is written that uses a REST API to interact with a server. Using HTTPS as thetransport, an HTTP request is sent and received an HTTP response. The responsecontains the HTTP response status code: 503 Service Unavailable.Which action is the appropriate response?

A. Add an Authorization header that supplies appropriate credentials and sends the updated request. 
B. Resend the request using HTTP as the transport instead of HTTPS.  
C. Add an Accept header that indicates the content types that the client understands and send the updated request. 
D. Look for a Retry-After header in the response and resend the request after the amount of time indicated. 

Show Answer

Question # 30

Which tool is used to deploy an IOx application to a group of lOx devices at one time? 

A. ioxclient  
B. lOx local manager  
C. Fog Network Director  
D. Kubernetes  

Show Answer

Question # 31

An enterprise refactors its monolithic application into a modem cloud-native application thatis based on microservices. A key requirement of the application design is to ensure that theIT team is aware of performance issues or bottlenecks in the new application Which twoapproaches must be part of the design considerations'' (Choose two.)

A. Periodically scale up the resources of the host machines when the application starts to experience high loads
B. Instrument the application code to gather telemetry data from logs, metrics or tracing  
C. Adopt a service-oriented architecture to handle communication between the services that make up the application 
D. Deploy infrastructure monitoring agents into the operating system of the host machines  
E. Implement infrastructure monitoring to ensure that pipeline components interoperate smoothly and reliably 

Show Answer

Question # 32

Where mus! the data be encrypted to ensure end-to-end encryption when using an API? 

A. on the device that consumes the API  
B. on the source device before transmission  
C. on the end device after a request is received  
D. on the server that stores the data  

Show Answer

Question # 33

How is an OAulh2 three-legged authentication flow initiated? 

A. The user makes a roquost to the OAuth client  
B. Exchange the key f<x an access token 
C. Construct an API call to retrieve the credentials.  
D. Get the authorization code.  

Show Answer

Question # 34

The response from a server includes the header ETag: W/”7eb8b94419e371767916ef13e0d6e63d”. Which statement is true?

A. The ETag has a Strong validator directive.  
B. The ETag has a Weak validator directive, which is an optional directive.  
C. The ETag has a Weak validator directive, which is a mandatory directive.  
D. The ETag has a Strong validator directive, which it is incorrectly formatted.  

Show Answer

Question # 35

There is a requirement to securely store unique usernames and passwords. Given a validusername, it is also required to validate that the password provided is correct. Which actionaccomplishes this task?

A. Encrypt the username, hash the password, and store these values.  
B. Hash the username, hash the password, and store these values.  
C. Encrypt the username, encrypt the password, and store these values.  
D. Hash the username, encrypt the password, and store these values.  

Show Answer

Question # 36

Which command is used 10 enable application hosting on a Cisco IOS XE device? 

A. iox  
B. iox-service  
C. application -honing  
D. app- hosting  

Show Answer

Question # 37

Which two techniques protect against injection attacks? (Choose two.) 

A. input validation  
B. trim whitespace  
C. limit text areas to 255 characters  
D. string escaping of user free text and data entry  
E. only use dropdown, checkbox, and radio button fields  

Show Answer

Question # 38

Which data encoding format uses gRPC by default for serializing structured sets ofinformation?

A. JSON  
B. YAML  
C. Protobuf  
D. XML  

Show Answer

Question # 39

While working with the Webex Teams API, on an application that uses end-to-endencryption, a webhook hasbeen received. What must be considered to read the message?

A. Webhook information cannot be used to read the message because of end-to-endencryption. The API keyis needed to decrypt the message. 
B. Webhook returns the full unencrypted message. Only the body is needed to query the API. 
C. Webhook returns a hashed version of the message that must be unhashed with the API key. 
D. Webhook returns message identification. To query, the API is needed for that message to get the decrypted information. 

Show Answer

Question # 40

Users report that they are no longer able to process transactions with the online orderingapplication, and the logging dashboard isdisplaying these messages:Fri Jan 10 19:37:31.123 ESI 2020 [FRONTEND] [NFO: Incoming request to add item tocart from user 45834534858Fri Jan 10 19:37:31.247 EST 2020 [BACKEND] INFO: Attempting to add item to cartFri Jan 10 19:37:31.250 EST 2020 [BACKEND] ERROR: Failed to add item: MYSQLDBERROR: Connection refusedWhat is causing the problem seen in these log messages?

A. The database server container has crashed.  
B. The backend process is overwhelmed with too many transactions.  
C. The backend is not authorized to commit to the database.  
D. The user is not authorized to add the item to their cart.  

Show Answer

Question # 41

Which scenario is an example of the pseudonymization of sensitive data that meets GDPRrequirements?

A. encrypting sensitive data at rest by using native cloud services and data in transit byusing SSL/TLS transport 
B. implementing XFowarded For at the frontend of a web app to enable the source IPaddresses of headers to change 
C. leveraging an application load balancer at the frontend of a web app for SSL/TLSdecryption to inspect data in transit 
D. separating the sensitive data into its own dedicated secured data store and using tokensin its place 

Show Answer

Question # 42

An Etag header is included in the HTTP response for an API resource. What are twobenefits of using the value of the Etag for future interactions involving the same APIresource? (Choose two.)

A. caching and optimization of response payloads  
B. creating conditional requests  
C. categorizing and comparing this API resource with others  
D. checking the integrity of the resource  
E. requesting the list of operations authorized for this resource  

Show Answer

Question # 43

Which OAuth mechanism enables clients to continue to have an active access tokenwithout further interaction from the user?

A. JWT  
B. password grant  
C. refresh grant  
D. preshared key  

Show Answer