Cisco 300-910 Online Practice Questions and Exam Preparation

Cisco 300-910 Online Questions & Answers

• Question 21:

  A new banking application is being developed as the main currency exchange resource for all the customers on a global scale. The application must comply with the security based on the deployed region. Therefore, the CI/CD pipeline must be created with the highest security possible.

  Which approach accomplishes this goal?

  A. Give the accounts used in the CI/CD pipeline full administrative rights to all applications
  B. Use the same passwords across the entire CI/CD pipeline
  C. Ensure that secrets are not inadvertently passed on during builds for pull requests via CI/CD pipeline
  D. Never use one-time passwords in CI/CD pipeline
  C. Ensure that secrets are not inadvertently passed on during builds for pull requests via CI/CD pipeline

• Question 22:

  DRAG DROP

  Drag and drop the scenarios from the left onto the cloud strategy categories on the right.

  Select and Place:

  

  

• Question 23:

  A three-tier web application must be moved to containers. A webserver is already in place, and the middleware container can talk to a central database server. The hostname of the database server is known, but the name of the middleware server must be provided to the webserver.

  In which file should the name of the middleware server be configured?

  A. Docker Service discovery daemon
  B. Docker Swarm
  C. Docker Compose
  D. Dynamic Host Configuration Protocol
  A. Docker Service discovery daemon

• Question 24:

  A DevOps engineer has built a new container and must open port 8080 for intercontainer communication. Which command must be added in a Dockerfile to accomplish this goal?

  A. EXPOSE 8080
  B. FIREWALL ADD-PORT 8080
  C. PORT 8080
  D. OPEN PORT 8080
  A. EXPOSE 8080

• Question 25:

  What are two benefits of Infrastructure as Code? (Choose two.)

  A. It enables continuous integration.
  B. It allows for management control.
  C. It ensures consistency.
  D. It improves application monitoring.
  E. It reduces risk.
  C. It ensures consistency.
  E. It reduces risk.

• Question 26:

  Which method is a safe way to provide a username/password combination to an application running as a service in a Docker container?

  A. encode the value with base64 in a secure DNS CTEXT entry
  B. as an environment variable in the Dockerfile
  C. Docker environment variable
  D. Docker secrets
  D. Docker secrets

  ---

  a docker secret is a blob of data, such as a password, SSH private key, SSL certificate, or another piece of data that should not be transmitted over a network or stored unencrypted in a Dockerfile or in your application's source code

• Question 27:

  What is the effective way to manage computing costs in a public cloud?

  A. Monitor data transfers to minimize cost.
  B. Use dedicated hardware for all instances.
  C. Select the largest instance option available in order to pay for only one instance.
  D. Make use of elastic services and scale on demand.
  D. Make use of elastic services and scale on demand.

• Question 28:

  What is a benefit of monitoring the CI/CD pipeline?

  A. troubleshoots distributed systems performance
  B. proactively deploys new servers if needed
  C. analyzes network outages that affect the network and server infrastructure
  D. provides insight into how efficiently the development team is operating
  D. provides insight into how efficiently the development team is operating

• Question 29:

  DRAG DROP

  Drag and drop the code from the bottom onto the box where the code is missing to post a message to a Cisco Webex space. Not all options are used.

  Select and Place:

  

  

• Question 30:

  Which type of security testing should be performed as a part of a CI/CD pipeline by analyzing the source code itself without compiling the code into a running executable?

  A. Dynamic Application Security Testing
  B. Runtime Application Health-Protection
  C. Continuous Application Security Testing
  D. Static Analysis Security Testing
  D. Static Analysis Security Testing