Which two techniques protect against injection attacks? (Choose two.)

string escaping of user free text and data entry

limit text areas to 255 characters

string escaping of user free text and data entry

only use dropdown, checkbox, and radio button fields

Which two strategies are used to protect personally identifiable information? (Choose two.)

Only hash usernames and passwords for efficient lookup.

Only encrypt usernames and passwords for efficient lookup.

The response from a server includes the header ETag: W/"7eb8b94419e371767916ef13e0d6e63d".Which statement is true?

The ETag has a Weak validator directive, which is an optional directive.

The ETag has a Strong validator directive.

The ETag has a Weak validator directive, which is an optional directive.

The ETag has a Weak validator directive, which is a mandatory directive.

The ETag has a Strong validator directive, which it is incorrectly formatted.

Refer to the exhibit. The Ansible playbook is using the netconf_module to configure an interface using a YANG model. As part of this workflow, which YANG models augment the interface?

iana-if-type and ietf-interfaces

ietf-ip and openconfig-interface

Refer to the exhibit. The YAML represented is using the ios_vrf module. As part of the Ansible playbook workflow, what is the result when this task is run?

VRFs are added to the device from the host_vars file, and any other VRFs on the device are removed.

VRFs not defined in the host_vars file are removed from the device.

VRFs not defined in the host_vars file are added to the device, and any other VRFs on the device remain.

VRFs defined in the host_vars file are removed from the device.

VRFs are added to the device from the host_vars file, and any other VRFs on the device are removed.

Refer to the exhibit. What is the output of this IOS-XE configuration program?

interface administrative status in IPv4 addresses

interface operational status in IPv6 addresses

interface administrative status in IPv4 addresses

interface operational status in IPv4 addresses

interface administrative status in IPv6 addresses

Refer to the exhibit above and click on the IETF Routing tab in the top left corner to help with this question. A developer is trying to update the routing instance by adding a new route to the routes list using the URL in the exhibit. What action must be taken to fix the error being received?

Change the url to ''/ietf-routing:routing/routing-instance=default''.

Fix the body being sent to update the routes list.

Update the authorization credentials.

Change the url to ''/ietf-routing:routing/routing-instance=default''.

Change the URL to ''/ietf-routing:routing-instance/default''.

Change the HTTP Method being used to make the change

Click on the GET Resource button above to view resources that will help with this question. An engineer is managing a DC with 6000 Cisco UCS servers installed and running. The engineer has been asked to identify all resources where the model is in the UCSB family and the available memory is less than or equal to 5 GB. Which REST API call accomplishes this task?

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB') and AvailableMemory le 5000

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=not(Model eq 'UCSC') and AvailableMemory le 5000

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=Model eq 'UCSB' and AvailableMemory lt 5000

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB') and AvailableMemory lt 5000

GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB') and AvailableMemory le 5000

A developer plans to create a new bugfix branch to fix a bug that was found on the release branch.Which command completes the task?

git checkout -b BUG FIX RELEASE

What is a benefit of continuous testing?

decreases the frequency of code check-ins

removes the requirement for test environments

increases the number of bugs found in production

Refer to the exhibit. What is the missing step in deploying a Docker container to lOx?

Pull/push the image to the Docker registry,

Build the package.cert file to sign the app ,

Which two design considerations should be considered when building a Cisco Meraki dashboard out of available APIs? (Choose two,)

Access to the API must first be enabled by using the settings for an organization.

The API requests require the key and the user credentials.

API call volume is rate-limited to five calls per second per organization.

The API version does not need to be specified in the URL.

Access to the API must first be enabled by using the settings for an organization.

The API requests require the key and the user credentials.

If the API key is shared, it cannot be regenerated

Users report that they are no longer able to process transactions with the online ordering application, and the logging dashboard is displaying these messages:Fri Jan 10 19:37:31.123 ESI 2020 [FRONTEND] [NFO: Incoming request to add item to cart from user 45834534858 Fri Jan 10 19:37:31.247 EST 2020 [BACKEND] INFO: Attempting to add item to cart Fri Jan 10 19:37:31.250 EST 2020[BACKEND] ERROR: Failed to add item: MYSQLDB ERROR:Connection refusedWhat is causing the problem seen in these log messages?

The database server container has crashed.

The backend process is overwhelmed with too many transactions.

The backend is not authorized to commit to the database.

The user is not authorized to add the item to their cart.

What are two advantages of using model-driven telemetry, such as gRPC. instead of traditional telemetry gathering methods? (Choose two.)

continuous information with incremental updates

decentralized storage of telemetry

continuous information with incremental updates

What is a consideration for using gRPC as the model-driven telemetry protocol on a Cisco IOS XE device?

human-readable transmission format

Refer to the exhibit. Which AP! call does an engineer use to delete the FQDN object?

DELETE /api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/object/fqdns/005056BB-0B24-0ed3-0000-858993545263

DELETE /api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f

DELETE /api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/object/fqdns/005056BB-0B24-0ed3-0000-858993545263

DELETE /api/fmc_config/v1/domain?id=e276abec-e0f2-11e3-8169-6d9ed49b625f

DELETE /api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/object/fqdns?id=005056BB-0B24-0ed3-0000-858993545263

Why is end-to-end encryption deployed when exposing sensitive data through APIs?

Data cannot be read or modified other than by the true source and destination.

Traffic is encrypted and decrypted at every hop in the network path.

Data transfers are untraceable from source to destination.

Data cannot be read or modified other than by the true source and destination.

Server-side encryption enables the destination to control data protection.

What is a characteristic of a monolithic architecture?

A service failure can bring down the whole application.

It is an application with multiple independent parts.

New capabilities are deployed by restarting a component of the application.

A service failure can bring down the whole application.

The components are platform-agnostic.

Cisco 350-901 Practice Test 4 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Cisco 350-901 Practice Test 4

Question

Cisco 350-901 Practice Tests

Practice Tests