Download 350-901 Study Questions To Pass Developing Applications using Cisco Core Platforms and APIs v1.0

Jonnie Karnath2023-03-15T05:35:15+00:00

To pass the Developing Applications using Cisco Core Platforms and APIs v1.0 exam, candidates need to have a deep understanding of these topics and be able to apply their knowledge to real-world scenarios. Our 350-901 study questions will help you develop a strong understanding of the exam’s content and format, giving you the confidence you need to tackle any question that comes your way. Our 350-901 study questions will help you identify any knowledge gaps or weak areas in your exam preparation, so you can focus your study efforts on the areas that need improvement. By using our 350-901 study questions, you will be fully prepared to pass the exam with flying colors and achieve your certification goals.

Page 1 of 11

1. Which two methods are API security best practices? (Choose two.)

Use tokens after the identity of a client has been established.

Use the same operating system throughout the infrastructure.

Use encryption and signatures to secure data.

Use basic auth credentials over all internal API interactions.

Use cloud hosting services to manage security configuration.

2. DRAG DROP

Refer to the exhibit.

Python threading allows a developer to have different parts of a program run concurrently and simplify a design.

Drag and drop the code snippets from the left onto the item numbers on the right that match the missing sections in the exhibit to create a thread instance.

3. A network operations team is using the cloud to automate some of their managed customer and branch locations. They require that all of their tooling be ephemeral by design and that the entire automation environment can be recreated without manual commands.

Automation code and configuration state will be stored in git for change control and versioning. The engineering high-level plan is to use VMs in a cloud- provider environment then configure open source tooling onto these VMs to poll, test, and configure the remote devices, as well as deploy the tooling itself.

Which configuration management and/or automation tooling is needed for this solution?

Ansible

Ansible and Terraform

NSO

Terraform

Ansible and NSO

4. DRAG DROP

Drag and drop the code from the bottom onto the box where the code is missing to create a new IKEv2 policy Not all options are used

5. Refer to the exhibit.

Which command results in a detached HEAD scenario?

git checkout 5af25b

git checkout Branch-5

git checkout master

git checkout log -2

6. DRAG DROP

Refer to the exhibit.

Drag and drop the steps from the left into the correct order of operation on the right for a successful OAuth2 three-legged authorization code grant flow.

7. Refer to the exhibit.

An engineer needs to implement REST API error handling when a timeout or rate limit scenario is present.

Which code snippet must be placed into the blank in the code to complete the API request?

A)

Option A

Option B

Option C

Option D

8. DRAG DROP

Drag and drop the steps from the left into the sequence on the fight to implement an OAuth2 three-legged authorization code flow grant type in an application Not all options are used.

9. Refer to the exhibit.

Which configuration of method and parameter retrieves the health of a laptop connected to the network from Cisco DNA Center?

PUT; network-health;

GET; client-health;

GET; network-device;

POST; network-device;

10. Refer to the exhibit.

Which code snippet must be added to the blank in the code to automate the evaluation and handling of errors due to wrong credentials when Basic Authorization is used?

A)

Option

Page 2 of 11

11. An application is made up of multiple microservices, each communicating via APIs. One service is beginning to be a bottleneck for the application because it can take a lot of time to complete requests. An engineer tried adding additional instances of this service behind the load balancer, but it did not have any effect.

Which application design change must be implemented m this scenario?

Move from synchronous to asynchronous interactions with the service and implement a message queue.

Deploy an API gateway to centralize all inbound communication requests and offload authentication

Vendor all dependencies into the service that is causing delays to remove external dependency checks.

Leverage serverless architecture instead of containers to gain the advantage of event driven APIs.

12. DRAG DROP

Refer to the exhibit.

Drag and drop the correct parts of the Dockerfile from the left onto the item numbers on the right that match the missing sections in the exhibit to complete the Dockerfile to successfully build and deploy a container running a Python application. Not all parts of the Dockerfile are used.

13. Refer to the exhibit.

A developer created the code, but it fails to execute.

Which code snippet helps to identify the issue?

A)

Option A

Option B

Option C

Option D

14. A developer is building an application to access a website. When running the application, an HTTP 403 error code has been received.

How should the application be modified to handle this code?

Create a loop on cancel the operation and run a new one after the code is received.

Use exponential backoff when retrying distributed services and other remote endpoints.

Build a try/except around the urlopen to find errors occurring in the request.

Redirect the request to an internal web server and make a new request from the internal resource.

15. Which Puppet manifest needs to be used to configure an interface GigabitEthernet 0/1 on a Cisco IOS switch?

Option A

Option B

Option C

Option D

16. Refer to the exhibit.

Which word is missing from this Ansible playbook shown, to allow the Cisco IOS XE commands for router configuration to be pushed after the playbook is executed?

Commands

Input

Lines

cofig

17. Refer to the exhibit.

Which two functions are performed by the load balancer when it handles traffic originating from the Internet destined to an application hosted on the file server farm? (Choose two.)

Terminate the TLS over the UDP connection from the router and originate an HTTPS connection to the selected server.

Terminate the TLS over the UDP connection from the router and originate an HTTP connection to the selected server.

Terminate the TLS over the TCP connection from the router and originate an HTTP connection to the selected server.

Terminate the TLS over the TCP connection from the router and originate an HTTPS connection to the selected server.

Terminate the TLS over the SCTP connection from the router and originate an HTTPS connection to the selected server.

18. An application is developed in order to communicate with Cisco Webex. For reporting, the application must retrieve all the messages sent to a Cisco Webex room on a monthly basis.

Which action calls /v1/messages directly?

Set up a webhook that has messages as the resource type and store the results locally.

Utilize the pagination functionality by defining the max property.

Recursively call the /vl/messages endpoint by using the beforeMessage property.

Filter the response results by specifying the created property in the request.

19. Which two techniques protect against injection attacks? (Choose two.)

input validation

trim whitespace

limit text areas to 255 characters

string escaping of user free text and data entry

only use dropdown, checkbox, and radio button fields

20. A developer has just completed the configuration of an API that connects sensitive internal systems. Based on company policies, the security of the data is a high priority.

Which approach must be taken to secure API keys and passwords?

Embed them directly in the code.

Store them in a hidden file.

Store them inside the source tree of the application.

Change them periodically.

Page 3 of 11

21. Which two statements about a stateless application are true? (Choose two.)

Different requests can be processed by different servers.

Requests are based only on information relayed with each request.

Information about earlier requests must be kept and must be accessible.

The same server must be used to process all requests that are linked to the same state.

No state information can be shared across servers.

22. DRAG DROP

Drag and drop the code from the bottom onto the box where the code is missing in the diagram to show how data is processed in Webex Teams. Not all options are used.

23. A bot has been created, called "386231131”, to respond to alarm messages. A developer is now creating a Webhook to allow the bot to respond to messages.

Which format allows the Webhook to respond to messages for the bot within Webex Teams?

A)

Option A

Option B

Option C

Option D

24. Refer to the exhibit. The code fetches the latest order from the purchases table for a specific user. An engineer needs to pass query parameters to the execute function to prevent an SQL injection attack.

Which code snippet must be placed in the blank in the code to meet this requirement?

A)

Option A

Option B

Option C

Option D

25. An application requires SSL certificates signed by an intermediate CA certificate.

The crt files must be available to the application:

• The root CA certificate is root_certrficate.crt.

• The intermediate CA certificate is intermediate_certificate.crt

• The application-specific SSL certificate is crt_certificate.crt.

Which Bash command outputs the certificate bundle as a .pern file?

A)

Option A

Option B

Option C

Option D

26. Refer to the exhibit.

Which AP! call does an engineer use to delete the FQDN object?

DELETE /api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f

DELETE /api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/object/fqdns/005056BB-0B24-0ed3-0000-858993545263

DELETE /api/fmc_config/v1/domain?id=e276abec-e0f2-11e3-8169-6d9ed49b625f

DELETE /api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/object/fqdns?id=005056BB-0B24-0ed3-0000-858993545263

27. Refer to the exhibit.

A network administrator copies SSL certificates to a Cisco NX-OS switch. An Ansible

playbook is created to enable NX-API, which will use the new certificate. In the

group_vars/vars.yml file, which code snippet must be used to define the properly formatted

variables?

A)

Option A

Option B

Option C

Option D

28. What are two advantages of using model-driven telemetry, such as gRPC. instead of traditional telemetry gathering methods? (Choose two.)

all data is ad-hoc

efficient use of bandwidth

no overhead

decentralized storage of telemetry

continuous information with incremental updates

29. A developer wants to automate virtual infrastructure to provision and manage it. The system will be implemented m large-scale deployment while offering redundancy and scalability with ease of management.

The solution must meet these requirements:

• Support the provisioning of up to 500 new virtual machines into private datacenters or the public cloud

• Support the modeling of a complex environment that consists of multiple virtual machines while supporting disaster recovery

• Maintain steady-state environments

Which configuration management solution must the developer use?

Puppet

Terraform

Docker

Arable

30. An application has these characteristics

• provide one service or function

• distributed database

• API gateway

• central repository for code

• configuration database

• uses session management

Which two design approaches contribute to the scalability of the application? (Choose two.)

built to scale based on a star topology

modular design iteration

session management in a stateless architecture

planned before the first device is deployed

distributed computing with tightly coupled components

Page 4 of 11

31. DRAG DROP

Refer to the exhibit.

A system administrator has installed a Linux-based alarm system in their home that can execute a Bash shell script when an intruder is detected.

Drag and drop the code snippets from the left onto the item numbers on the right that match the missing sections in the exhibit to create a chat-ops script that will notify of alarms via the Webex Teams REST API. Not all code snippets are used.

32. DRAG DROP

Drag and drop the code from the bottom onto the box where the code is missing to delete a host object by using the Cisco Firepower Device Manager API Not all options are used.

33. FILL BLANK

Fill in the blanks to complete the Python script to enable the SSID with a name of “371767916” in the network resource “11111111” using the Meraki Dashboard API.

34. A container running a Python script is failing when it reaches the integration testing phase of the CI/CD process. The code has been reviewed thoroughly and the build process works on this container and all other containers pass unit and integration testing.

What should be verified to resolve the issue?

that the correct port is exposed in the Dockerfile

that the necessary modules and packages are installed on build

that the script is running from the right directory

that the Python version of the container image is correct

35. Which scenario is an example of the pseudonymization of sensitive data that meets GDPR requirements?

encrypting sensitive data at rest by using native cloud services and data in transit by using SSL/TLS transport

implementing XFowarded For at the frontend of a web app to enable the source IP addresses of headers to change

leveraging an application load balancer at the frontend of a web app for SSL/TLS decryption to inspect data in transit

separating the sensitive data into its own dedicated secured data store and using tokens in its place

36. A developer is deploying an application to automate the configuration and management of Osco network files and routers. The application must use REST API interface lo achieve programmability. The security team mandates that the network must be protected against DDoS attacks.

What mitigates the attacks without impacting genuine requests?

API rate limiting at the application layer

IP address filtering at the application layer

traffic routing on the network perimeter

firewall on the network perimeter

37. Which two countermeasures help reduce the risk of playback attacks? (Choose two.)

Store data in a NoSQL database.

Implement message authentication (HMAC).

Enable end-to-end encryption.

Remove stack traces from errors.

Use short-lived access tokens.

38. DRAG DROP

A developer must package an application for Kubernetes to integrate into a prebuilt CD environment. The application utilizes a Docker image from Cisco DevNet public repository and is accessible from a specific port of the container.

Drag and drop the code from the bottom onto the box where the code is missing in the Kubernetes YAML configuration file. Not all options are used.

39. Click on the GET Resource button above to view resources that will help with this question. An engineer is managing a DC with 6000 Cisco UCS servers installed and running. The engineer has been asked to identify all resources where the model is in the UCSB family and the available memory is less than or equal to 5 GB.

Which REST API call accomplishes this task?

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=not(Model eq ‘UCSC’) and AvailableMemory le 5000

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=Model eq ‘UCSB’ and AvailableMemory lt 5000

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB’) and AvailableMemory lt 5000

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB’) and AvailableMemory le 5000

40. DRAG DROP

Refer to the exhibit above and click on the resource tabs in the top left corner to view resources to help with this question.

Drag and drop the correct code snippets from the left onto the item numbers on the right that match the missing sections in the exhibit to complete the cURL script that will use RESTCONF to update an interface on a CISCO IOS XE device.

Page 5 of 11

41. Refer to the exhibit.

The cURL POST request creates an OAuth access token for authentication with FDM API requests.

What is the purpose of the file “@token_data” that cURL is handling?

This file is a container to log possible error responses in the request.

This file is given as input to store the access token received from FD

This file is used to send authentication related headers.

This file contains raw data that is needed for token authentication.

42. Refer to the exhibit.

Which action resolves the error for the GitLab CI/CD pipeline execution?

Download the correct artifacts by specifying them in GitLab.

Use the python:3.9.0a4-alpine3.10 Docker image

Install the missing python libraries via pip3.

Add the absolute path to the python3 executable

43. DRAG DROP

A developer is creating a Python function that adds network engineers to a Webex room to troubleshoot after a monitoring alert.

Drag and drop the code from the bottom onto the box where the code is missing in the Python function to add the engineers to the room. Not all options are used.

44. DRAG DROP

Drag and drop the code from the bottom onto the box where the code is missing to retrieve a summary of physical compute resources. The collected information about the compute resources will be presented in a dashboard to be developed for device monitoring purposes. Not all snippets are used.

45. A Cisco Catalyst 9000 switch has guest shell enabled.

Which Linux command installs a third-party application?

yum Install <package-name>

apt-get install <package-name>

zypper install <package-name>

dnf install <package-name>

46. DRAG DROP

A developer is designing an application that uses confidential information for a company and its clients. The developer must implement different secret storage techniques for each handled secret to enforce security policy compliance within a project.

Drag and drop the security policy requirements from the left onto the storage solutions on the right

47. Refer to the exhibit.

The presented application consists of a Nginx container and a load balancer service.

Which GitLab CI/CD configuration implements the Kubernetes deployment?

Option A

Option B

Option C

Option D

48. Refer to the exhibit.

A company has extended networking from the data center to the cloud through Transit VPC.

Which two statements describe the benefits of this approach? (Choose two.)

Dynamic routing combined with multi-AZ- deployment creates a robust network infrastructure.

VPC virtual gateways provide highly available connections to virtual networks.

Dedicated VPC simplifies load balancing by combining internal and external web services.

VPC virtual gateways provide more secure connections to virtual networks.

Dedicated VPC simplifies routing by not combining this service with other shared services.

49. Refer to the exhibit.

What is the missing step in deploying a Docker container to lOx?

Pull/push the image to the Docker registry,

Build the package.yaml file.

Build the package.cert file to sign the app ,

50. Which two types of organization are subject to GDPR? (Choose two.)

only organizations that operate outside the EU

any organization that offers goods or services to customers in the EU

only organizations that have offices in countries that are part of the EU

any organization that operates within the EU

only organizations that physically reside in the EU

Page 6 of 11

51. Refer to the exhibit.

A network engineer needs to handle API errors in their requests when users do not have permission to access the resource, even if they are authenticated and authorized.

Which line of code needs to be placed on the snippet where the code is missing to handle these API errors?

if r.status_code == 403

il if r.raise for status() == 403

if r.raise for_status() = 401

if r.status_code = 401

52. A developer is working on an enhancement for an application feature and has made changes to a branch called ‘devcor-432436127a-enhance4‘. When merging the branch to production, conflicts occurred.

Which Git command must the developer use to recreate the pre-merge state?

git merge -no-edit

git merge -abort

git merge -revert

git merge ―comrmt

53. DRAG DROP

Drag and drop the code from the bottom onto the box where the code is missing to construct a UCS XML API request to generate two service profiles from the template org-root/is-service-template. Not at options are used

54. A developer has issued git add file1 and file2 test.py command to add the three files for the next commit, but then decides to executed test.py from this command.

Which command needs to be used to exclude test.py from this commit but keep the rest of the files?

git clean ― test.py

git reset - test py

git checkout - file1 file2

git stash -- file1 file 2

55. What are two benefits of using distributed log collectors? (Choose two.)

supports multiple transport protocols such as TCP/UDP

improves performance and reduces resource consumption

provides flexibility due to a wide range of plugins and accepted log formats

enables extension of logs with fields and export to backend systems

buffers and resends data when the network is unavailable

56. Refer to the exhibit.

Which RESTCONF verb changes the GigabitEthernet2 interface from 192.168.100.1/24 to 10.10.10.1/24

POST

PATCH

GET

HEAD

57. Refer to the exhibit.

Which line of code must be added to this code snippet to allow an application to pull the next set of paginated items?

requests.get(url, links=[‘next’][‘url’])

requests.get(url, headers=links[‘next’][‘url’])

requests.get(res.links[‘next’][‘url’], headers=headers)

requests.get(res.headers.get(‘Link”)[‘next’][‘url’], headers=headers)

58. Refer to the exhibit.

Which action should be performed to avoid an SQL injection attack?

Encrypt the password that is used to connect to the database

Develop a denial of service response plan

Vacate the input on the platform variable

Compile the Python file instead of allowing live interpretation

59. Refer to the exhibit.

Option A

Option B

Option C

Option D

60. A developer deploys a web application in a local data center that is now experiencing high traffic load from users accessing data through REST API calls.

Which approach enhances

the responsiveness and performance of the API?

Use HTTP POST or other non-read methods for read requests when possible

Ensure that all read requests are clearly identified by the PUT method

Configure API payload to return errors in HTTP 200 responses

Use HTTP standard authorization header to submit authentication credentials

Page 7 of 11

61. DRAG DROP

Drag and drop the code from the bottom onto the box where the code is missing in the Python code to complete the greeter function white also mitigating against XSS threats. Not all options are used.

62. Refer to the exhibit. A developer wants to automatically deploy infrastructure for a containerized application. A .gitlab-ci.yml file must describe a pipeline that builds a container based on a supplied Dockerfile and executes an Ansible playbook on the configured container.

What must be added where the code S missing to complete the script?

Option A

Option B

Option C

Option D

63. Refer to the exhibit.

An Intersight API is being used to query RackUnit resources that have a tag keyword set to “Site”.

What is the expected output of this command?

list of all resources that have a tag with the keyword “Site”

error message because the Value field was not specified

error message because the tag filter should be lowercase

list of all sites that contain RackUnit tagged compute resources

64. Which security approach should be used for developing a REST API?

Use custom security relevant HTTP response codes

Utilise TLS for end to end encryption

Add an API key to each URL string

Utilize CORS headers

65. Refer to the exhibit.

Which cURL request is included in the presented XML as the body of the response?

A)

Option A

Option B

Option C

Option D

66. What are two principles according to the build, release, run principle of the twelve-factor app methodology? (Choose two.)

Code changes are able to be made at runtime.

Separation between the build, release, and run phases.

Releases should have a unique identifier.

Existing releases are able to be mutated after creation.

Release stage is responsible for compilation of assets and binaries.

67. Which transport protocol is used by gNMI?

HTTP/2

HTTP 1.1

SSH

MQTT

68. Refer to the exhibit.

An attempt to execute a CI/CD pipeline results m the error shown.

What is the cause of the error?

The VCS repository is unavailable

The unit tests failed to complete

The built artifacts failed to publish to the target server

The remote library repository is unavailable

69. Refer to the exhibit.

This script uses ciscoyang to configure two VRF instances on a Cisco IOS-XR device using the Yang NETCONF type.

Which two words are required to complete the script? (Choose two.)

ensure

commit

false

replace

none

70. Refer to the exhibit.

A developer must configure an SSL certificate for an nginx web server.

Which code must be added on the script to accomplish this configuration?

A)

Option A

Option B

Option C

Option D

Page 8 of 11

71. When end-to-end encryption is implemented, which area is most vulnerable to exploitation?

cryptographic key exchange

endpoint security

cryptographic key generation

security of data in transit

72. A developer plans to create a new bugfix branch to fix a bug that was found on the release branch.

Which command completes the task?

git checkout -b RELEASE BUGFIX

git checkout -t BUGF1X RELEASE

git checkout -b BUG FIX RELEASE

git checkout -t RELEASE BUGFIX

73. What is a benefit of continuous testing?

decreases the frequency of code check-ins

removes the requirement for test environments

enables parallel testing

increases the number of bugs found in production

74. Which database type should be used to store data received from model-driven telemetry?

BigQuery database

Time series database

NoSQL database

PostgreSQL database

75. What is a risk to data privacy during the storage and transmission of data?

The risk of exposure is increased when data is shared between applications.

The transfer of unencrypted data between storage devices increases the risk of exposure.

Data breaches cause ongoing exposure of personal information.

The transfer of unencrypted personally identifiable financial information from a storage device increases the risk of a data broach.

76. Refer to the exhibit.

A developer has created a Python script that retrieves information about the deployment of Cisco wireless access points using REST API.

Which two code snippets must be added to the blank in the code to print the value of the userid key instead of printing the full JSON response? (Choose two.)

A)

Option A

Option B

Option C

Option D

77. An application must be able to print the values of the variables in specific modules. Different message levels will be used for production and for development. Proof of access and activity must be documented.

What must be included in the implementation to support these observability requirements?

metrics

logging

streaming

78. An application has been developed for monitoring rooms in Cisco Webex. An engineer uses the application to retrieve all the messages from a Cisco Webex room, but the results are slowly presented.

Which action optimizes calls to retrieve the messages from the /v1/messages endpoint?

Define the ma property by using the pagination functionality.

Set the beforeMessage property to retrieve the messages sent before a specific message I

Avoid unnecessary calls by using a prior request to /v1/rooms to retrieve the last activity property.

Filter the response results by specifying the created property in the request.

79. Refer to the exhibit

An application is developed to perform multiple API calls. The calls will be performed on the infrastructure devices Delays in the information transfer occur when the application is executed.

What are two reasons for the issue? (Choose two)

The list devices API call is failing and does not return a result

Listing devices lakes longer than usual due to high network latency

One of the API calls takes roughly three times as long to complete

The list devices API call is inefficient and should be refactored

The requests are being rate limited to prevent multiple calls causing the excessive load

80. DRAG DROP

Drag and drop the code from the bottom onto the box whore the code is missing to retrieve a list of rack units that have more than 16 CPU cores. The filtered list will be used to create a summary on the monitoring dashboard. Not all options are used.

Page 9 of 11

81. Refer to the exhibit.

Which line of code needs to be placed on the snippet where the code is missing to provide APl rate-limiting to the requests?

int(self.response.headers.post('Retry-After'))

int(response.headers.get('Retry-After'))

int(self.response.headers.get(Retry-After'))

int(response.headers.post('Retry-After'))

82. Refer to the exhibit.

Which key value pair from the ios_ntp Ansible module creates an NTP server peer?

state: present

state: True

config: present

config: True

83. What is a benefit of running multiple instances of a back-end service and using load balancing to distribute the communication between the front-end and back-end services?

The consistency of data for stateful services increases.

High availability is provided for the back-end services.

Scaling horizontally is automated out of the box.

The total load on the database servers decreases.

84. In the three-legged OAuth2 process, after the authorization server presents a form to the resource owner to grant access, what is the next step?

The resource owner authenticates and optionally authorizes with the authorization server.

The user who owns the resource initiates a request to the OAuth client.

If the resource owner allows access, the authorization server sends the OAuth client a redirection.

A form to allow or restrict access is submitted by the owner of the resource.

85. DRAG DROP

A developer is creating a Python script to catch errors using REST API calls and to aid in debugging.

Drag and drop the code from the bottom onto the box where the code is missing to implement control flow for REST API errors. Not all options are used.

86. Two Elasticsearch database servers use bidirectional asynchronous data replication Both servers accept writes from clients.

The design must meet these requirements:

• The cluster must survive if a fault occurs that causes the network connection to go down between nodes

• The data must remain consistent if communication between nodes fails.

• The data must be spread evenly across all nodes in the cluster.

Which design approach must be used to meet the requirements?

Set the initial voting configuration to force a specific node as the master.

Scale the master nodes down to a single node.

Set the minimum_master_nodes to 2 in the configuration.

Add a third cluster node to provide majority votes.

87. DRAG DROP

Drag and drop the components from the left into the order on the right to create the flow of the three-legged OAuth2.

88. How should a web application be designed to work on a platform where up to 1000 requests per second can be served?

Use algorithms like random early detection to deny excessive requests.

Set a per-user limit (for example, 5 requests/minute/user) and deny the requests from the users who have reached the limit.

Only 1000 user connections are allowed; further connections are denied so that all connected users can be served.

All requests are saved and processed one by one so that all users can be served eventually.

89. A developer releases a new application for network automation of Cisco devices deployed m a local data center. The application utilizes complex design patterns such as microservices that host multiple third-party libraries and programming languages. The development must be simplified by implementing an observability-driven development lifecycle.

Which two considerations must be taken to meet the requirements? (Choose two.)

description of low-level errors

which KPls to monitor

relevant metrics to expose

which monitoring tools to use

identifying customer priorities

90. Refer to the exhibit.

A network engineer must integrate error handling tor time-outs on network devices using the REST interface.

Which line of code needs to be placed on the snippet where the code is missing to accomplish this task?

elif resp.status_code == 429 or serf._retries < selff._MAX_RETRIES:

elif resp.status_code == 404 or self, retries < self._MAX_RETRIES:

elif resp.status_code == 429 and self .retries < self._MAX_RETRIES:

elif resp.status_code == 404 and self._relries < self._MAX_RETRIES:

Page 10 of 11

91. Refer to the exhibit.

An application has been developed to serve the users in an enterprise After HTTP cache controls are implemented m the application users report that they receive state data when they refresh the page Without removing HTTP cache controls, which change ensures that the users get current data when refreshing the page'

Reduce the expire_after value to 60.

Add a Cache-Control header that has a value of no-cache, no-store must-revalidate.

Add an H-None-Match header that has a value of an Entity Tag.

Add an Expires header that has a value of 0.

92. Which load balancing algorithm balances load based on the active sessions of a node?

weighted round-robin

IP source affinity

least connections

sticky session

93. DRAG DROP

Drag and drop the code from the bottom onto the box where the code is missing to permit network traffic between 10.0.0.0/8 and all other networks on port 80 for a Cisco Nexus 9000 switch by using the Puppet module. Not all options are used.

94. Refer to the exhibit.

One part of an application routinely uses the Cisco Meraki API to collate data about all clients Other parts of the application also use the Meraki API, but a single API key is used within the application. The organization has approximately 4.000 clients across 30 networks Some of the application users report poor performance and missing data.

Which two changes improve the performance of the application? (Choose two.)

Check for HTTP code 429 and wait until Retry-After time before further calls are made

Configure multiple API keys in the application and rotate usage of each one.

Use random values in the User-Agent header when HTTP calls are made.

Use fewer API calls to create a more efficient endpoint.

Check API response payloads for later reuse in real time during code execution.

95. Refer to the exhibits.

Which data payload completes the CURL command to run the create port object API call In Cisco Firepower Threat Defense?

A)

Option A

Option B

Option C

Option D

96. What are two building blocks of the 12-factor app? (Choose two.)

Stateful Processes

Easy access to underlying systems

Dev and Prod must be different

One codebase

Isolated Dependencies

97. A developer deploys a SQLite database in a Docker container. Single-use secret keys are generated each time

a user accesses the database. The keys expire after 24 hours. Where should the keys be stored?

Outside of the Docker container in the source code of applications that connect to the SQLite database.

In a separate file inside the Docker container that runs the SQLite database.

In an encrypted database table within the SQLite database.

In a separate storage volume within the Docker container.

98. Which OAuth mechanism enables clients to continue to have an active access token without further interaction from the user?

JWT

password grant

refresh grant

preshared key

99. DRAG DROP

An engineer is developing a web-based application that will be used as a central repository for the HR department. The application needs to authenticate user access and encrypt communication.

Drag and drop the steps from the left into the order on the right to install an application-specific SSL certificate.

100. What securely stores and encrypts the API keys and tokens that are used for an application deployment?

ITSM

Artifactory

GitHub

Vault

Page 11 of 11

101. A new record-keeping application for employees to track customer orders must be deployed to a company's existing infrastructure. The host servers reside in a data center in a different country to where the majority of users work.

The new network configuration for the database server is:

• IP: 10.8.32.10

• Subnet Mask: 255.255.255.0

• Hostname: CustOrd423320458-Prod-010

• MAC: 18-46-AC-6F-F4-52.

The performance of the client-side application is a priority due to the high demand placed on it by employees.

Which area should the team consider in terms of impact to application performance due to the planned deployment?

jitter

decreased bandwidth

latency

connectivity loss

102. Refer to the exhibit

A script returns the location of a specific access point when given the access point name If a user enters a search value such as DROP TABLE access points then the entire table is removed.

What must be added to the box where the code is missing to prevent a SQL injection attack?

A)

Option A

Option B

Option C

Option D

103. DRAG DROP

Refer to the exhibit.

Drag and drop the code from the bottom onto the box where the code is missing to query the last 10 Bluetooth clients seen by APs in their network using the Meraki Dashboard API Not all options are used.

104. A custom dashboard of the network health must be created by using Cisco DNA Center APIs An existing dashboard is a RESTful API that receives data from Cisco DNA Center as a new metric every time the network health information is sent from the script to the dashboard.

Which set of requests creates the custom dashboard?

PUT request to Cisco DNA Center to obtain the network health information and then a POST request to the dashboard to publish the new metric

POST request to Cisco DNA Center to obtain the network health information and then a GET request to the dashboard to publish the new metric

GET request to Cisco DNA Center to obtain the network health information and then a PUT request to the dashboard to publish the new metric

GET request to Cisco DNA Center to obtain the network health information and then a POST request to the dashboard to publish the new metric

105. DRAG DROP

Drag and drop the REST API authentication method from the left to the description on the right

106. Refer to the exhibit.

Option A

Option B

Option C

Option D

107. Which two data encoding techniques are supported by gRPC? (Choose two.)

XML

JSON

ASCII

ProtoBuf

YAML

108. A client is written that uses a REST API to interact with a server. Using HTTPS as the transport, an HTTP request is sent and received an HTTP response. The response contains the HTTP response status code: 503 Service Unavailable.

Which action is the appropriate response?

Add an Authorization header that supplies appropriate credentials and sends the updated request.

Resend the request using HTTP as the transport instead of HTTP

Add an Accept header that indicates the content types that the client understands and send the updated request.

Look for a Retry-After header in the response and resend the request after the amount of time indicated.

109. What is the function of dependency management?

separating code into modules that execute independently

utilizing a single programming language/framework for each code project

automating the identification and resolution of code dependencies

managing and enforcing unique software version names or numbers

Facebook Twitter LinkedIn Google + Email

Download 350-901 Study Questions To Pass Developing Applications using Cisco Core Platforms and APIs v1.0

Download 350-901 Study Questions To Pass Developing Applications using Cisco Core Platforms and APIs v1.0

Author

LEAVE A COMMENT Cancel reply

Related Posts