Cisco 350-901 Online Practice Questions and Exam Preparation

Cisco 350-901 Online Questions & Answers

• Question 191:

  DRAG DROP

  Drag and drop the code from the bottom onto the box where the code is missing in the Python code to query for user permissions while mitigating against SQL Injection. Not all options are used.

  Select and Place:

  

  

  Explanation

  Explanation/Reference:

• Question 192:

  Two Elasticsearch database servers use bidirectional asynchronous data replication Both servers accept writes from clients.

  The design must meet these requirements:

  1. The cluster must survive if a fault occurs that causes the network connection to go down between nodes 2. The data must remain consistent if communication between nodes fails.

  3. The data must be spread evenly across all nodes in the cluster.

  Which design approach must be used to meet the requirements?

  A. Set the initial voting configuration to force a specific node as the master.
  B. Scale the master nodes down to a single node.
  C. Set the minimum_master_nodes to 2 in the configuration.
  D. Add a third cluster node to provide majority votes.
  D. Add a third cluster node to provide majority votes.

  ---

  Explanation

• Question 193:

  What are two steps in the OAuth2 protocol flow? (Choose two.)

  A. The user is authenticated by the authorization server and granted an access token.
  B. The user's original credentials are validated by the resource server and authorization is granted.
  C. The user indirectly requests authorization through the authorization server.
  D. The user requests an access token by authentication and authorization grant presentation.
  E. The user requests the protected resource from the resource server using the original credentials.
  A. The user is authenticated by the authorization server and granted an access token.
  C. The user indirectly requests authorization through the authorization server.

  ---

  Explanation

  https://www.digitalocean.com/community/tutorials/an-introduction-to-oauth-2

• Question 194:

  Which two situations are flagged by software tools designed for dependency checking in continuous integration environments, such as OWASP? (Choose two.)

  A. publicly disclosed vulnerabilities related to the included dependencies
  B. mismatches in coding styles and conventions in the included dependencies
  C. incompatible licenses in the included dependencies
  D. test case failures introduced by bugs in the included dependencies
  E. buffer overflows to occur as the result of a combination of the included dependencies
  A. publicly disclosed vulnerabilities related to the included dependencies
  E. buffer overflows to occur as the result of a combination of the included dependencies

  ---

  Explanation

• Question 195:

  The Meraki API URL https://api.meraki.com/api/v0/networks/123456789/ssids/2 has been stored in the environment variable meraki_url and the API key has been stored in meraki_api_key. Which snippet presents the API call to configure, secure and enable an SSID using the Meraki API?

  A. curl -X PUT --url $meraki_url \-H "X-Cisco-Meraki-API-Key: $meraki_api_key" \-H "Accept: application/json" \-H "Content-Type: application/json" \--data-raw '{"name": "My SSID","enabled": true}'
  B. curl -X PUT --url $meraki_url \-H "X-Cisco-Meraki-API-Key: $meraki_api_key" \-H "Accept: application/json" \-H "Content-Type: application/json" \--data-raw '{"name": "SSID","useVlanTagging": true}'
  C. curl -X PUT --url $meraki_url \-H "X-Cisco-Meraki-API-Key: $meraki_api_key" \-H "Accept: application/json" \-H "Content-Type: application/json" \--data-raw '{"name": "My SSID", "enabled": true,"authMode": "psk", "encryptionMode": "wpa","psk": "securepass","wpaEncryptionMode": "WPA1 and WPA2"}'
  D. curl -X PUT --url $meraki_url \-H "X-Cisco-Meraki-API-Key: $meraki_api_key" \-H "Accept: application/json" \-H "Content-Type: application/json" \--data-raw '{"name": "My SSID", "enabled": false,"authMode": "psk", "encryptionMode": "wpa","psk": "securepass","wpaEncryptionMode": "WPA1 and WPA2"}'
  C. curl -X PUT --url $meraki_url \-H "X-Cisco-Meraki-API-Key: $meraki_api_key" \-H "Accept: application/json" \-H "Content-Type: application/json" \--data-raw '{"name": "My SSID", "enabled": true,"authMode": "psk", "encryptionMode": "wpa","psk": "securepass","wpaEncryptionMode": "WPA1 and WPA2"}'

  ---

  Explanation

• Question 196:

  DRAG DROP

  Refer to the exhibit.

  

  Drag and drop the code snippets from the bottom onto the blanks in the Python script to list all rooms and use pagination to restrict the number of results to five by using the Cisco Webex API. Not all options are used.

  Select and Place:

  

  

  Explanation

  Explanation/Reference:

• Question 197:

  A team is developing a cloud-native application.

  The project has these architecture requirements:

  1. Leverage the use of containers for effective usage of resources.

  2. Scale up the application automatically when more resources are needed.

  3. Ensure that the application is developed as a stateless application.

  Which two guidelines must be met? (Choose two.)

  A. Rely on the web server to help provide sticky sessions for web transactions.
  B. Use Python class definition to leverage object-oriented techniques for development.
  C. Ensure that all data that should persist is stored in a data store such as a database.
  D. Use memory or disk space for temporary data that should not persist between nodes.
  E. Develop the application using Python and virtual environments.
  C. Ensure that all data that should persist is stored in a data store such as a database.
  D. Use memory or disk space for temporary data that should not persist between nodes.

  ---

  Explanation

• Question 198:

  DRAG DROP

  Drag and drop the steps on the left into the order on the right for an end-user to access an OAuth2 protected resource using the Authorization Code Grant1 flow.

  Select and Place:

  

  

  Explanation

  Explanation/Reference:

• Question 199:

  A developer corrects an application bug with ID buglDa98416945110x and then installs it on a Cisco Catalyst 9300 series switch. Which command will enable the application called myapp?

  A. app-hosting install appid myapp package usbflash1:myapp.tar
  B. app-hosting run re-start appid my app bugfix
  C. app-hosting activate appid myapp
  D. app-hosting start appid myapp
  D. app-hosting start appid myapp

  ---

  Explanation

• Question 200:

  Refer to the exhibit.

  

  A Python API server has been deployed. Based on metrics and logs, increased load has been noticed. Which two approaches must be taken to optimize API usage on the server? (Choose two.)

  A. Include the ETag header in the API response
  B. Include the Last-Modified header in the API response.
  C. Change the query to be more efficient.
  D. Include the Content-Type header in the API response.
  E. Leverage middleware caching and respond with HTTP code 204 in the API response.
  A. Include the ETag header in the API response
  B. Include the Last-Modified header in the API response.

  ---

  Explanation