Cisco 350-901 Online Practice Questions and Exam Preparation

Cisco 350-901 Online Questions & Answers

• Question 231:

  DRAG DROP

  Drag and drop the code snippets from the bottom onto the blanks in the code to retrieve the audit logs that were created after a specific date. Not all options are used.

  Select and Place:

  

  

  Explanation

  Explanation/Reference:

• Question 232:

  DRAG DROP

  A Python script must query the Cisco DNA center API for the number of unique wireless clients that are exhibiting poor health behavior.

  Drag and drop the code from the bottom onto the box where the code is missing to complete the script. Not all options are used.

  Select and Place:

  

  

  Explanation

  Explanation/Reference:

  References:

  https://developer.cisco.com/docs/dna-center/#!get-overall-client-health https://blog.wimwauters.com/networkprogrammability/2020-04-25_dnac_part3_pythonrequests/

• Question 233:

  DRAG DROP

  Refer to the exhibit.

  

  Drag and drop the code snippets from the bottom onto the blanks in the code to create a Python script using the Cisco Intersight API.

  The script will become part of a Python application that will authenticate users on the Intersight platform, find processes and resources, and help to automate infrastructure. Not all options are used.

  Select and Place:

  

  

  Explanation

  Explanation/Reference:

• Question 234:

  A developer has created a fix for an application bug with the ID a98453928854x and has installed it on a Cisco Catalyst 9300 series switch. Which command will enable the application called devcorapp?

  A. app-hosting start appid devcorapp
  B. app-hosting install package usbflash1:devcorapp.tar
  C. app-hosting run re-start appid devcorapp bugfix
  D. app-hosting activate appid devcorapp
  D. app-hosting activate appid devcorapp

  ---

  Explanation

• Question 235:

  A developer is deploying an application to automate the configuration and management of Osco network files and routers The application must use REST API interface lo achieve programmability. The security team mandates that the network must be protected against DDoS attacks.

  What mitigates the attacks without impacting genuine requests?

  A. API rate limiting at the application layer
  B. IP address filtering at the application layer
  C. traffic routing on the network perimeter
  D. firewall on the network perimeter
  A. API rate limiting at the application layer

  ---

  Explanation

• Question 236:

  Refer to the exhibit.

  

  A network administrator copies SSL certificates to a Cisco NX-OS switch. An Ansible playbook is created to enable NX-API, which will use the new certificate. In the group_vars/vars.yml file, which code snippet must be used to define the properly formatted variables?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

• Question 237:

  What are two capabilities of AppDynamics when instrumenting an application? (Choose two.)

  A. runtime application architecture discovery
  B. end user experience modeling
  C. automatic scaling based on load
  D. on-the-fly application editing
  E. end user screen capture
  A. runtime application architecture discovery
  B. end user experience modeling

  ---

  Explanation

• Question 238:

  Refer to the exhibit.

  

  An application was developed to be deployed on a global scale. The application will be available to all users of an enterprise and will require secure access. During code review, poor secret storage practices were identified. How must the secret storage approach be changed to improve security?

  A. Leverage an external secret vault to retrieve DB_PWD and set the vault key as an OS environment variable before running the code.
  B. Set an OS environment variable for DB_PWD to the database password before running the code, and stop setting DB_PWD within the code.
  C. In DB_PWD, store a hashed version of the database password generated by using the hashlib library.
  D. Store an encrypted version of the database password in DB_PWD and decrypt the password before running the code.
  A. Leverage an external secret vault to retrieve DB_PWD and set the vault key as an OS environment variable before running the code.

  ---

  Explanation

• Question 239:

  Refer to the exhibit.

  

  A Docker swarm cluster is configured to load balance services across data centers in three different geographical regions west central and east.

  The cluster has three manager nodes and three worker nodes Anew service named cisco.devnet is being deployed.

  The service has these design requirements:

  1. All containers must be hosted only on nodes in the central region 2. The service must run only on nodes that are ineligible for the manager role

  Which approach fulfills the requirements?

  A. Create a second swarm cluster that is hosted only in the central region.
  B. Create the service manually in the central region and set replicas to 0.
  C. Use placement constraints to control nodes to which the service can be assigned.
  D. Enable the control flag in the containers of the west and east regions to prevent the service from starting
  C. Use placement constraints to control nodes to which the service can be assigned.

  ---

  Explanation

• Question 240:

  During the final step in the OAuth2 authorization process, what must the client send to the OAuth authorization server to obtain a data access token?

  A. resource owner's permission
  B. refresh access token
  C. authorization challenge request
  D. short-lived access code
  D. short-lived access code

  ---

  Explanation