Which two practices help make the security of an application a more integral part of the software development lifecycle? (Choose two.)

Add a step to the CI/CD pipeline that runs a dynamic code analysis tool during the pipeline execution.

Add a step to the CI/CD pipeline that runs a static code analysis tool during the pipeline execution.

Add a step to the CI/CD pipeline that runs a dynamic code analysis tool during the pipeline execution.

Add a step to the CI/CD pipeline that runs a static code analysis tool during the pipeline execution.

Use only software modules that are written by the internal team.

Add a step to the CI/CD pipeline to modify the release plan so that updated versions of the software are made available more often.

Ensure that the code repository server has enabled drive encryption and stores the keys on a Trusted Platform Module or Hardware Security Module.

Refer to the exhibit. How should the Jenkins job be troubleshooted based on the error provided?

Verify what the responding file created.

Place the code in a container and run the job again.

Configuration changes to the production network devices are performed by a CI/CD pipeline. The code repository and the CI tool are running on separate servers. Some configuration changes are pushed to the code repository, but the pipeline did not start.Why did the pipeline fail to start?

The webhook call from the code repository did not reach the CI server.

The CI server was not configured as a Git remote for the repository.

The webhook call from the code repository did not reach the CI server.

Configuration changes must be sent to the pipeline, which then updates the repository.

The pipeline must be started manually after the code repository is updated.

Which description of a canary deployment is true?

deployment to a limited set of servers or users

deployment that is rolled back automatically after a configurable amount of minutes

deployment relating to data mining development

deployment to a limited set of servers or users

Refer to the exhibit. What is causing the requests code to fail?

The requests library is not imported.

Rython3 is not compatible with requests.

The requests library is not imported.

The requests library is not installed.

The requests coming into stdin fail because device_ip cannot be parsed.

Which two actions help limit the attack surface of your Docker container? (Choose two.)

Run only a single service in each container.

Use version tags for base images and dependencies.

Run only a single service in each container.

Run all services in a single image.

Use version tags for base images and dependencies.

Use Kali Linux as a base image.

Download images over HTTPS supporting sites.

A DevOps engineer has built a container to host a web-server and it must run as an executable.Which command must be configured in a Dockerfile to accomplish this goal?

ENTRYPOINT [“/usr/sbin/apache2ctl”, “-D”, “FOREGROUND”]

ENTRYPOINT <usr/sbin/apache2ctl>

ENTRYPOINT [“/usr/sbin/apache2ctl”, “-D”, “FOREGROUND”]

ENTRYPOINT [“BACKGROUND”, “-D”, “/usr/sbin/apache2ctl”]

ENTRYPOINT {usr/sbin/apache2ctl}

Which Docker command is used to start an interactive Bash shell in a running container named “test”?

docker attach -it test /bin/bash

What are two reasons a Docker golden image should be updated? (Choose two.)

when the application has a new release

when a fix for a security vulnerability is released

when there is a change to a username or password in the Docker secrets

when the application has a new release

when a fix for a security vulnerability is released

when a change is needed to an environment variable in the Dockerfile

when the base image is nearing the end of life

Microservices architecture pattern has been applied and the system has been architected as a set of services. Each service is deployed as a set of instances for throughput and availability. In which two ways are these services packaged and deployed? (Choose two.)

Service instances must be isolated from one another.

Service must be independently deployable and scalable.

Service instances must be isolated from one another.

Service must be independently deployable and scalable.

Service are written using the same languages, frameworks, and framework versions.

Service must be dependent, deployable, and scalable.

Service instances do not need to be isolated from one another.

What is the purpose of using a build tool in software development?

It complies source code into binaries and executables.

It provides a way to edit source code using a graphical interface.

It is a manual process that is followed to build software.

It tracks bugs and incidents in a built application.

Refer to the exhibit. What is the reason for this error message?

The required dependencies for the requests module are not installed.

The required dependencies for the urllib3 module are not installed.

The requests module is not installed.

The required dependencies for the requests module are not installed.

The site-packages directory has been corrupted.

What is the effective way to manage computing costs in a public cloud?

Make use of elastic services and scale on demand.

Monitor data transfers to minimize cost.

Use dedicated hardware for all instances.

Select the largest instance option available in order to pay for only one instance.

Make use of elastic services and scale on demand.

ConfigMap keys have been mapped to different file names using the volumes.configMap.items field.What is the result if a wrong ConfigMap key is specified?

The volume is created with errors.

What are two benefits of Infrastructure as Code? (Choose two.)

It enables continuous integration.

It allows for management control.

It improves application monitoring.

Refer to the exhibit. What is the user doing with Drone in this automated test?

testing PostgreSQL deployment in an Alpine Linux VM

testing Alpine Linux versus Ubuntu Linux

testing a PostgreSQL DB against multiple architectures

testing only the amd64 architecture

testing PostgreSQL deployment in an Alpine Linux VM

An interface on a router as a Layer 3 link has been configured to another device by updating an Ansible playbook that is executed via a CI/CD pipeline. The Ansible playbook was written to push the configuration change using the ios_config module. Which automated test validates that the interface is functioning as it should?

Automated testing is already built in because the playbook execution is successful only after Ansible validates that it applied the change.

Add a pipeline step that runs the playbook a second type. If it does not modify the device on the second run, then the interface is correctly configured.

Automated testing is already built in because the playbook execution is successful only after Ansible validates that it applied the change.

Add a pipeline step that captures and parses the packet flow for the interface.

Add a pipeline step that captures and parses the show ip interface output so that the operational state can be referenced.

Which two characteristics of a build tool that is used in an automated build pipeline? (Choose two.)

It builds your software on the production environment.

It builds your software when changes are committed.

It runs unit tests against code that is committed.

It builds your software on the production environment.

It builds your software when changes are committed.

It builds your software every 500 milliseconds.

It must have a plug-in for Puppet and Maven.

Which two statements about Infrastructure as Code are true? (Choose two.)

DevOps builds upon Infrastructure as Code.

Infrastructure as Code is based on practices from software development.

Test-driven development practices make use of Infrastructure as Code.

Infrastructure as Code refers to automated testing libraries.

DevOps builds upon Infrastructure as Code.

Infrastructure as Code is based on practices from software development.

Infrastructure as Code must use the same programming language as the application.

Refer to the exhibit. The exhibit shows the output of an Ansible task that prints the contents of the show_ip_int_brief variable that was registered in a different task in the playbook.Which expression is used to print the output of the command without its header row?

show_ip_int_brief[‘stdout_lines’][0][1:]

show_ip_int_brief[‘stdout_lines’][0]

show_ip_int_brief[‘stdout_lines’][1:]

show_ip_int_brief[‘stdout_lines’][0][1:]

show_ip_int_brief[‘stdout_lines’]

When static routes are added to a router in a network using a CI/CD pipeline, an Ansible playbook is used to make these changes. Which steps must be added to the pipeline to validate that the changes have the intended effect on the traffic flow?

Add a step to capture the routing table before the change, and add a step after the change to capture it again. Calculate the difference between the two for review.

Add a step to run the debug ip routing command before the change, and add a step after the change to issue the no debug ip routing command.

Add a step to capture the routing table before the change, and add a step after the change to capture it again. Calculate the difference between the two for review.

Add a step to ping a host on each of the static routes before the change, and a step after to repeat the same check. Calculate the difference between the two checks for review.

Add a step to run the same playbook again with the debug option enabled and use grep on the log output to ensure that the commands are not applied again.

A DevOps engineer is supporting a containerized application with multiple components running across the Kubernetes cluster. Metrics from the container (CPU and memory) and application (requests per second and heap size) are being collected by Prometheus and displayed with Grafan a. Users report transaction timeout problems with the application, but the metric graphs all look within normal levels.Which type of failure would prevent the engineer from seeing the problem using the captured metrics?

Some containers are crashing regularly and being restarted automatically by Kubernetes.

Grafana has lost connectivity to Prometheus, which causes graphs to display only the cached data.

CPU and memory metrics from Kubernetes nodes are not accurate due to the way that containers share resources.

Some containers are crashing regularly and being restarted automatically by Kubernetes.

The metricbeat agent has crashed and is no longer sending new data to Prometheus, so the metrics are not updating.

A developer has created a deployment that should launch a pod to run their database service. The pod should launch with a metadata name of “Cisco-DB," and the developer has added it to the "Cisco" namespace in their deployment.Which Kubernetes command confirms that the service is running and usable?

kubectl -n Cisco get pods | grep “Cisco-DB”

kubectl -n Cisco get services | grep “Cisco-DB”

kubectl -n Cisco get pods | grep “Cisco-DB”

kubectl get pods | grep “Cisco-DB”

kubectl -n Cisco get service | grep “Cisco-DB”

Which step must be taken to enable centralized logging in a Kubernetes environment?

Create a DaemonSet that deploys a container with a logging agent on every node in the cluster.

No steps need to be taken. The master node automatically aggregates logs from all worker nodes and stores them on the specified persistent volume.

Create a CustomResourceDefinition in each deployment that specifies the IP or names the log collector.

Deploy a sidecar node that aggregates logs from the entire cluster.

Create a DaemonSet that deploys a container with a logging agent on every node in the cluster.

Cisco 300-910 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

A DevOps engineer must validate the working state of the network before implementing a CI/CD pipeline model. Which configuration management tool is designed to accomplish this?

Jenkins

Genie CLI

Travis CI

Python YAML data libraries

Comment (0)

Cisco 300-910 Practice Test 1

Question

Cisco 300-910 Practice Tests

Practice Tests