How to pass Cisco 350-901 exam with the help of dumps?

Question # 1

A developer creates an application for a Cisco Catalyst 9000 switch in a Docker container.Which action must be taken to host the application on the switch?

A. Copy the application code to a NETCONF file and upload the file to the switch
B. Connect the switch to Cisco DNA Center and push the application through the platform.
C. Use the Cisco IOxClient tool to export the application to a ZIP file and push the file to theswitch
D. Export the application as a TAR file and import the file to the switch

Show Answer

Question # 2

A development team is looking for a tool to automate configurations across theinfrastructure. The tool must have these characteristics:•written in Python•define playbooks (or intent•stateless•imperativeWhich tool meets these requirements?

A. Puppet
B. Netmiko
C. Ansible
D. NCM

Show Answer

Question # 3

An engineer needs to configure an interface named GigabitEthernet3 with an IP address onseveral RESTCONF-enabled Cisco IOS XE devices. Which code snippet must be placed in the blank in the code to meet this requirement?

A. (item["name"])'
B. (item["name"])/ip/addres3
C. item["name"]:/ip/address/primary'
D. (ltemt"name"]} /ip

Show Answer

Question # 4

Cisco sensorBase gathers threat information from a variety of cisco products and servicesand performs analytics on threats. Which term describes this process?

A. consumption
B. deployment
C. sharing
D. authoring

Show Answer

Question # 5

Refer to the exhibit. The code fetches the latest order from the purchases table for aspecific user. An engineer needs to pass query parameters to the execute function toprevent an SQL injection attack. Which code snippet must be placed in the blank in thecode to meet this requirement?

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 6

What is a risk to data privacy during the storage and transmission of data?

A. The risk of exposure is increased when data is shared between applications.
B. The transfer of unencrypted data between storage devices increases the risk ofexposure.
C. Data breaches cause ongoing exposure of personal information.
D. The transfer of unencrypted personally identifiable financial information from a storagedevice increases the risk of a data broach.

Show Answer

Question # 7

Which approach is used to protect East-West API traffic?

A. Use encryption between services
B. Install a perimeter firewall
C. Use a dedicated cloud connection service.
D. Implement an API gateway

Show Answer

Question # 8

A web application has those requirements for HTTP cache control:The client browser must be prevented from storing responses that containsensitive information.Assets must be downloaded from the remote server every time.Which header must the engineer use?

A. must-revabdate
B. no-store
C. public
D. private

Show Answer

Question # 9

Which action enhances end-user privacy when an application is built that collects andprocesses the location data from devices?

A. Pepper the MAC address for each device.
B. Salt the MAC address for each device.
C. Implement an algorithmic information theoretic loss to the MAC address for each device.
D. Use the network device serial number to encrypt the MAC address for each device.

Show Answer

Question # 10

An application requires SSL certificates signed by an intermediate CA certificate. The crtfiles must be available to the application:• The root CA certificate is root_certrficate.crt.• The intermediate CA certificate is intermediate_certificate.crt• The application-specific SSL certificate is crt_certificate.crt.Which Bash command outputs the certificate bundle as a .pern file?

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 11

A developer is deploying an application to automate the configuration and management ofOsco network files and routers The application must use REST API interface lo achieveprogrammability. The security team mandates that the network must be protected againstDDoS attacks What mitigates the attacks without impacting genuine requests?

A. API rate limiting at the application layer
B. IP address filtering at the application layer
C. traffic routing on the network perimeter
D. firewall on the network perimeter

Show Answer

Question # 12

Refer to the exhibit.

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 13

When an application is designed that requires high availability, what is a reason to use across-region cloud?

A. Provide disaster recovery protection
B. Protect from a single component failure
C. Minimize costs
D. Account for failure in another zone

Show Answer

Question # 14

An engineer is developing a Docket container for an application in Python For securityreasons the application needs to be accessible on port 5001 only Which line should beadded to the dockerfile m order to accomplish this?

A. ENTRYPOINT 5001
B. PORT SRC 5001
C. ADO PORT 5001
D. EXPOSE 5001

Show Answer

Question # 15

A custom dashboard of the network health must be created by using Cisco DNA CenterAPIs An existing dashboard is a RESTful API that receives data from Cisco DNA Center asa new metric every time the network health information is sent from the script to thedashboard Which set of requests creates the custom dashboard?

A. PUT request to Cisco DNA Center to obtain the network health information and then aPOST request to the dashboard to publish the new metric
B. POST request to Cisco DNA Center to obtain the network health information and then aGET request to the dashboard to publish the new metric
C. GET request to Cisco DNA Center to obtain the network health information and then aPUT request to the dashboard to publish the new metric
D. GET request to Cisco DNA Center to obtain the network health information and then aPOST request to the dashboard to publish the new metric

Show Answer

Question # 16

An application has these characteristics• provide one service or function• distributed database• API gateway• central repository for code• configuration database• uses session managementWhich two design approaches contribute to the scalability of the application'? (Choose two)

A. built to scale based on a star topology
B. modular design iteration
C. session management in a stateless architecture
D. planned before the first device is deployed
E. distributed computing with tightly coupled components

Show Answer

Question # 17

Which Puppet manifest changes the NTP server and generates the traffic from VLAN 15?A)

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 18

A web application is being developed to provide online sales to a retailer. The customerswill need to use their username and passwords to login into then profile and complete theirorder For this reason the application must store user passwords Which approach ensuresthat an attacker wifi need to crack the passwords one at a time?

A. Apply the peppering technique
B. Store the passwords by using asymmetric encryption
C. Apply the salting technique
D. Store the passwords by using symmetric encryption

Show Answer

Question # 19

How is AppDynamics used to instrument an application?

A. Provides visibility into the transaction logs that can be correlated to specific businesstransaction requests
B. Enables instrumenting a backend web server (or packet installation by using anAppDynamics agent
C. Retrieves a significant amount of information from the perspective of the databaseserver by using application monitoring
D. Monitors traffic flows by using an AppDynamics agent installed on a networkinfrastructure device

Show Answer

Question # 20

Refer to the exhibit. The application follows a containerized microservices architecture that has one containerper microservice. The microservices communicate with each other by using REST APIsThe double-headed arrows m the diagram display chains of synchronous HTTP callsneeded for a single use/request Which action ensures the resilience of the application inthe scope of a single user request' 

A. Redesign the application to be separated into these three layers Presentation. API. and Data
B. Implement retries with exponential backoff during HTTP API calls
C. Set up multiple instances of each microservice m active/active mode by using the Orchestrator
D. Create two virtual machines that each host an instance of the application and set up a cluster

Show Answer

Question # 21

Refer to the exhibit An application is developed to perform multiple API calls. The calls will be performed on theinfrastructure devices Delays in the information transfer occur when the application isexecuted What are two reasons for the issue? (Choose two )

A. The list devices API call is failing and does not return a result
B. Listing devices lakes longer than usual due to high network latency
C. One of the API calls takes roughly three times as long to complete
D. The list devices API call is inefficient and should be refactored
E. The requests are being rate limited to prevent multiple calls causing the excessive load

Show Answer

Question # 22

Given an application that implements a basic search function as Well as a video uploadfunction , which two load-balancing approachesoptimize the application's user experience? (Choose two.)

A. Video upload requests should be routed to the endpoint using an intermediate hop.
B. Video upload requests should be routed to the endpoint with highest data throughput.
C. Video upload requests should be routed to the endpoint with lowest round-trip latency.
D. Search requests should be routed to the endpoint with lowest round-trip latency.
E. Search requests should be routed to the endpoint with highest data throughput.

Show Answer

Question # 23

Refer to the exhibit. A developer created a Python script to retrieve information about Meraki devices in a localnetwork deployment After requesting a security review of the code the security analyst hasobserved poor secret storage practices What is the appropriate secret storage approach''

A. Set the Base64 encoded version of the API key as MER_API_KEY m the code andBase64 decode before using m the header
B. Leverage an external secret vault to retrieve MER_API_KEY and embed the vault keyas a new variable before running the code
C. Leverage an external secret vault to retrieve MER_APl_KEY and set the vault key as anOS environment variable before running the code
D. Set an OS environment variable for MER_API_KEY to the API key before running thecode and no longer set MER_API_KEY within the code

Show Answer

Question # 24

Which two encryption principles should be applied to secure APIs? (Choose two.)

A. Use temporary files as part of the encryption and decryption process
B. Transmit authorization information by using digitally signed payloads 
C. Use encrypted connections to protect data n transit 
D. Reuse source code that contain existing UUIDs 
E. Embed keys in code to simplify the decryption process

Show Answer

Question # 25

Refer to the exhibit. An engineer is configuring Ansible to run playbooks against Cisco IOS XE Software. Whatshould be configured in ansible.cfg as the connection type?

A. network_cli
B. ssh
C. shell
D. command

Show Answer

Question # 26

Refer to the exhibit An engineer writes a script to retrieve data from a REST API and must build support forcases where the response that contains data from the server may take a longer time thannormal Which code must be added to the snippet where the code is missing to catch sucha timeout?

A. request.exeception.ConnectTimeout
B. request.executions.DataTimeout
C. request.exeception.HTTPError
D. request.exception.ReadTimeout

Show Answer

Question # 27

What is a benefit of using model-driven telemetry?

A. enables operational data to be collected at higher rates and a higher scale 
B. enables the application to pull data faster than pushing the data 
C. reduces the load on the server by enabling the client to pull data
D. simplifies the development of clients by using a single encoding standard for the data

Show Answer

Question # 28

An architect must optimize traffic that targets a popular API endpoint Currently, theapplication downloads a large file hourly, but often the file is unchanged and the downloadcauses unnecessary load and delays Which cURL command must be used to determinethe last modified date of the file and to optimize the API usage?

A. curl GET request
B. curl HEAD request
C. curl --silent request
D. curl -H 'Cache-Control: no-cache' request

Show Answer

Question # 29

A developer deploys a web application in a local data center that is now experiencing hightraffic load from users accessing data through REST API calls. Which approach enhancesthe responsiveness and performance of the API?

A. Use HTTP POST or other non-read methods for read requests when possible
B. Ensure that all read requests are clearly identified by the PUT method
C. Configure API payload to return errors in HTTP 200 responses
D. Use HTTP standard authorization header to submit authentication credentials

Show Answer

Question # 30

A developer is working on a new feature in a branch named 'newfeay000222118' and thecurrent working primary branch is named 'pnm409024967' The developer requires a mergecommit during a fast forward merge for record-keeping purposes. Which Git commandmust Be used?

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 31

Which scenario is an example of the pseudonymization of sensitive data that meets GDPRrequirements? 

A. encrypting sensitive data at rest by using native cloud services and data in transit byusing SSL/TLS transport
B. implementing XFowarded For at the frontend of a web app to enable the source IPaddresses of headers to change
C. leveraging an application load balancer at the frontend of a web app for SSL/TLSdecryption to inspect data in transit 
D. separating the sensitive data into its own dedicated secured data store and using tokensin its place

Show Answer

Question # 32

Which command is used 10 enable application hosting on a Cisco IOS XE device?

A. iox
B. iox-service
C. application -honing
D. app- hosting

Show Answer

Question # 33

A. Option A
B. Option B
C. Option C
D. Option D
E. Option E

Show Answer

Question # 34

What is the result of a successful OAuth2 authorization grant flow?

A. The user has the application rights that correspond to the user's role within theapplication's database
B. The application is provided with a token that allows actions on services on the user'sbehalf
C. The user has administrative rights to the application's backend services
D. The third-party service is provided with a token that allows actions to be performed

Show Answer

Question # 35

Refer to the exhibit.

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 36

Refer to the exhibit.

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 37

Which security approach should be used for developing a REST API? 

A. Use custom security relevant HTTP response codes
B. Utilise TLS for end to end encryption 
C. Add an API key to each URL string
D. Utilize CORS headers

Show Answer

Question # 38

Refer to the exhibit. A Docker swarm cluster is configured to load balance services across data centers in threedifferent geographical regions west central and east. The cluster has three manager nodesand three worker nodes Anew service named cisco.devnet is being deployed. The servicehas these design requirements• All containers must be hosted only on nodes in the central region• The service must run only on nodes that are ineligible for the manager roleWhich approach fulfills the requirements?

A. Create a second swarm cluster that is hosted only in the central region.
B. Create the service manually in the central region and set replicas to 0.
C. Use placement constraints to control nodes to which the service can be assigned.
D. Enable the control flag in the containers of the west and east regions to prevent theservice from starting

Show Answer

Question # 39

A Cisco Catalyst 9000 switch has guest shell enabled. Which Linux command installs athird-party application?

A. yum Install <package-name>
B. apt-get install <package-name>
C. zypper install <package-name>
D. dnf install <package-name>

Show Answer

Question # 40

A timeframe custom dashboard must be developed to present data collected from CiscoMeraki. The dashboard must include a wireless health alert count. What needs to be builtas a prerequisite?

A. A publicly available HTTP server to receive Meraki Webhooks from the MerakiDashboard API 
B. A publicly available HTTP server to receive Meraki Webhooks from the Meraki ScanningAPI 
C. A daemon to consume the Wireless Health endpoint of the Meraki Scanning API
D. A daemon to consume the Wireless Health endpoint of the Meraki Dashboard API

Show Answer

Question # 41

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 42

A developer wants to automate virtual infrastructure to provision and manage it. Thesystem will be implemented m large-scale deployment while offering redundancy andscalability with ease of management The solution must meet these requirements:• Support the provisioning of up to 500 new virtual machines into private datacenters or thepublic cloud• Support the modeling of a complex environment that consists of multiple virtual machineswhile supporting disaster recovery• Maintain steady-state environmentsWhich configuration management solution must the developer use?

A. Puppet
B. Terraform
C. Docker
D. Arable

Show Answer

Question # 43

Refer to the exhibit.

A. Option A
B. Option B
C. Option C 
D. Option D

Show Answer

Question # 44

Refer to the exhibit. A network engineer writes a script to test authentication workflow using Python and RESTAPI. The engineer wants to ensure that the script handles expected errors by matchingoutput to HTTP status codes The scnpt uses the Python requests module. Which line ofcode must be added on the snippet where the code is missing?

A. requests.error_code
B. response.sutus_code
C. response
D. requests.post

Show Answer

Question # 45

Which OAuth mechanism enables clients to continue to have an active access tokenwithout further interaction from the user?

A. JWT
B. password grant 
C. refresh grant 
D. preshared key

Show Answer

Question # 46

Refer to the exhibit.

A. Option
B. Option
C. Option
D. Option

Show Answer

Question # 47

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 48

Refer to the exhibit. The cisco_devnet Docker swarm service runs across five replicas The development teamtags and imports a new image named devnet'test 1 1 and requests that the image beupgraded on each container There must be no service outages during the upgrade processWhich two design approaches must be used? (Choose two.)

A. Implement rolling upgrades by using the docker service update command.
B. Enable parallel upgrades by using the docker service update command.
C. Ensure that the service is hosted behind a VIP with no session persistence.
D. Update the restart policy of the containers to restart upon failure.
E. Ensure that the service replicas are set to a minimum of 5

Show Answer

Question # 49

A developer has issued git add file1 and file2 test.py command to add the three files for thenext commit, but then decides to executed test.py from this command. Which commandneeds to be used to exclude test.py from this commit but keep the rest of the files?

A. git clean — test.py
B. git reset - test py
C. git checkout - file1 file2
D. git stash -- file1 file 2

Show Answer

Question # 50

Refer to the exhibit.

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 51

Refer to the exhibit.

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 52

Refer to the exhibit. An engineer is managing a network that consists of Cisco IOSXE devices. There is a needto retrieve the details of the interface GigabitEthernet2 using RESTCONF. Which URI willaccomplish this by providing the same response as shown in the JSON body?

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 53

Refer to the exhibit. An application has been developed to serve the users in an enterprise After HTTP cachecontrols are implemented m the application users report that they receive state data whenthey refresh the page Without removing HTTP cache controls, which change ensures thatthe users get current data when refreshing the page'

A. Reduce the expire_after value to 60.
B. Add a Cache-Control header that has a value of no-cache, no-store must-revalidate.
C. Add an H-None-Match header that has a value of an Entity Tag.
D. Add an Expires header that has a value of 0.

Show Answer

Question # 54

What is a well-defined concept for GDPR compliance?

A. Records that are relevant to an existing contract agreement can be retained as long asthe contract is in effect.
B. Data controllers must confirm to data subjects as to whether where, and why personaldata is being processed.
C. Personal data that was collected before the compliance standards were set do not needto be protected.
D. Compliance standards apply to organizations that have a physical presence in Europe.

Show Answer

Question # 55

Refer to the exhibit.

Show Answer

Question # 56

Refer to the exhibit.

Show Answer

Question # 57

Refer to the exhibit. An attempt to execute a CI/CD pipeline results m the error shown What is the cause of theerror? 

A. The VCS repository is unavailable 
B. The unit tests failed to complete
C. The built artifacts failed to publish to the target server 
D. The remote library repository is unavailable

Show Answer

Question # 58

Refer to the exhibit above and click on the IETF Routing tab in the top left corner to helpwith this question. A developer is trying to update the routing instance by adding a newroute to the routes list using the URL in the exhibit. What action must be taken to fix theerror being received?

A. Fix the body being sent to update the routes list.
B. Update the authorization credentials.
C. Change the url to ''/ietf-routing:routing/routing-instance=default''.
D. Change the URL to ''/ietf-routing:routing-instance/default''.
E. Change the HTTP Method being used to make the change

Show Answer

Question # 59

Which function does Fluentd fulfill for application logging in Kubernetes? 

A. logging agent for distribution
B. backend time series database storage 
C. monitoring and log visualization 
D. messaging queueig infrastructure

Show Answer

Question # 60

Which two countermeasures help reduce the risk of playback attacks? (Choose two.)

A. Store data in a NoSQL database.
B. Implement message authentication (HMAC).
C. Enable end-to-end encryption.
D. Remove stack traces from errors.
E. Use short-lived access tokens.

Show Answer

Question # 61

An enterprise refactors its monolithic application into a modem cloud-native application thatis based on microservices. A key requirement of the application design is to ensure that theIT team is aware of performance issues or bottlenecks in the new application Which twoapproaches must be part of the design considerations'' (Choose two.)

A. Periodically scale up the resources of the host machines when the application starts toexperience high loads
B. Instrument the application code to gather telemetry data from logs, metrics or tracing
C. Adopt a service-oriented architecture to handle communication between the servicesthat make up the application
D. Deploy infrastructure monitoring agents into the operating system of the host machines
E. Implement infrastructure monitoring to ensure that pipeline components interoperatesmoothly and reliably

Show Answer

Question # 62

Refer to the exhibit. Refer to the exhibit A Docker swarm service is currently running m a local data center Theservice is hosting an HTML website it the container fads then the service becomesunavailable The design must meet these requirements• The service must be highly available and resilient against a data center outage.• The service must be accessible from a single URL• The HTTP session must remain on the server from which the original request was sent• Failure of the server must force the client to reconnectWhich two design approaches must be used to meet the requirements? (Choose two.)

A. Create another swarm cluster within a data center and deploy a secondary instance ofthe service.
B. Create another node in the swarm duster to scale the service across the nodes over tworeplicas.
C. Configure an external load balancer to route requests to the swarm service by usingsession persistence
D. Scale the Docker swarm service to 2 and set endpoint-mode to DNSRR instead of thedefault value of VIP
E. Configure a routing mesh to route requests to the swarm service by using NAT on thenetwork side

Show Answer

Question # 63

What are two building blocks of the 12-factor app? (Choose two.)

A. Stateful Processes
B. Easy access to underlying systems
C. Dev and Prod must be different 
D. One codebase
E. Isolated Dependencies

Show Answer

Question # 64

Refer to the exhibit. An application is created to serve an enterprise Based on use and department requirements, changes are requested quarterly Which application design change improvescode maintainability?

A. Use global variables
B. Use double quotes instead of single quotes to enclose variables
C. Use different indent levels for variables
D. Use more verbose names for variables

Show Answer

Question # 65

Refer to the exhibit Pipenv is used to manage dependencies The test funs successfully ona local environment. What is the reason for the error when running the test on a CI'CDpipeline? 

A. The piple in the local environment was not pushed to the remote repository 
B. All the unit tests in testsum py failed
C. Pytest did not detect any functions that start with test_'.
D. Nose2 was not used as the test runner

Show Answer

Question # 66

Refer to the exhibits which show the documentation associated with the create port object API cafl in Cisco Firepower Threat Defense, and a cURL command. Which data payload completes the cURL command to run the APi call?A) 

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 67

Refer to the exhibit. The JSON response is received from the Meraki location API. Whichparameter is missing?

A. apMac
B. clientMac
C. clientId
D. accesspoint 

Show Answer

Question # 68

What are two steps in the OAuth2 protocol flow? (Choose two.) 

A. The user is authenticated by the authorization server and granted an access token.
B. The user’s original credentials are validated by the resource server and authorization isgranted.
C. The user indirectly requests authorization through the authorization server.
D. The user requests an access token by authentication and authorization grantpresentation.
E. The user requests the protected resource from the resource server using the originalcredentials.

Show Answer

Question # 69

A local Docker container with a Container ID of 391441516e7a is running a Python application. Which command is used to connect to a bash shell in the running container? 

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 70

When end-to-end encryption is implemented, which area is most vulnerable to exploitation? 

A. cryptographic key exchange
B. endpoint security
C. cryptographic key generation
D. security of data in transit

Show Answer

Question # 71

Refer to the exhibit. Which command resolves the merge conflict by removing the previous commit from the commit history

A. Option A
B. Option B
C. Option C
D. Option D

Show Answer

Question # 72

What is the function of dependency management? 

A. separating code into modules that execute independently  
B. utilizing a single programming language/framework for each code project  
C. automating the identification and resolution of code dependencies  
D. managing and enforcing unique software version names or numbers  

Show Answer

Question # 73

A developer is building an application to access a website. When running the application, an HTTP 403 error code has been received. How should the application be modified to handle this code?

A. Create a loop on cancel the operation and run a new one after the code is received.  
B. Use exponential backoff when retrying distributed services and other remote endpoints.  
C. Build a try/except around the urlopen to find errors occurring in the request.  
D. Redirect the request to an internal web server and make a new request from the internal resource

Show Answer