Which security approach should be used for developing a REST API?

Utilise TLS for end to end encryption

Use custom security relevant HTTP response codes

Utilise TLS for end to end encryption

Add an API key to each URL string

What is a benefit of using model-driven telemetry?

simplifies the development of clients by using a single encoding standard for the data

enables operational data to be collected at higher rates and a higher scale

enables the application to pull data faster than pushing the data

reduces the load on the server by enabling the client to pull data

simplifies the development of clients by using a single encoding standard for the data

Refer to the exhibit. An application has been developed to serve the users in an enterprise After HTTP cache controls areimplemented m the application users report that they receive state data when they refresh the pageWithout removing HTTP cache controls, which change ensures that the users get current data whenrefreshing the page'

Add a Cache-Control header that has a value of no-cache, no-store must-revalidate.

Reduce the expire_after value to 60.

Add a Cache-Control header that has a value of no-cache, no-store must-revalidate.

Add an H-None-Match header that has a value of an Entity Tag.

Add an Expires header that has a value of 0.

Refer to the exhibit An application is developed to perform multiple API calls. The calls will be performed on the infrastructure devices Delays in the information transfer occur when the application is executed What are two reasons for the issue? (Choose two )

Listing devices lakes longer than usual due to high network latency

One of the API calls takes roughly three times as long to complete

The list devices API call is failing and does not return a result

Listing devices lakes longer than usual due to high network latency

One of the API calls takes roughly three times as long to complete

The list devices API call is inefficient and should be refactored

The requests are being rate limited to prevent multiple calls causing the excessive load

Refer to the exhibit. Which action should be performed to avoid an SQL injection attack?

Vacate the input on the platform variable

Encrypt the password that is used to connect to the database

Develop a denial of service response plan

Vacate the input on the platform variable

Compile the Python file instead of allowing live interpretation

A developer is deploying an application to automate the configuration and management of Osco network files and routers The application must use REST API interface lo achieve programmability.The security team mandates that the network must be protected against DDoS attacks What mitigates the attacks without impacting genuine requests?

firewall on the network perimeter

API rate limiting at the application layer

IP address filtering at the application layer

traffic routing on the network perimeter

firewall on the network perimeter

Refer to the exhibit Pipenv is used to manage dependencies The test funs successfully on a local environment. What is the reason for the error when running the test on a CI'CD pipeline?

The piple in the local environment was not pushed to the remote repository

All the unit tests in testsum py failed

Pytest did not detect any functions that start with test_'.

Nose2 was not used as the test runner

A local data center deployment using Cisco NX-OS switches is scaling and requires automatic configuration at scale Configuration management must be set up for a Cisco NX-OS switch by using Ansible. The Ansible control server is currently located on a different subnet than the switch The solution has these requirements• The transport protocol used must be encrypted• The connections must originate from a server m the same local network• Enable mode must be supported Which connectivity method must be used?

SSH through a bastion host and ansible_become method for privilege escalation.

HTTPS through a repository and ansible_become method for privilege escalation

An enterprise refactors its monolithic application into a modem cloud-native application that is based on microservices. A key requirement of the application design is to ensure that the IT team is aware of performance issues or bottlenecks in the new application Which two approaches must be part of the design considerations'' (Choose two.)

Instrument the application code to gather telemetry data from logs, metrics or tracing

Implement infrastructure monitoring to ensure that pipeline components interoperate smoothly and reliably

Periodically scale up the resources of the host machines when the application starts to experience high loads

Instrument the application code to gather telemetry data from logs, metrics or tracing

Adopt a service-oriented architecture to handle communication between the services that make up the application

Deploy infrastructure monitoring agents into the operating system of the host machines

Implement infrastructure monitoring to ensure that pipeline components interoperate smoothly and reliably

Refer to the exhibit. An application is created to serve an enterprise Based on use and department requirements, changes are requested quarterly Which application design change improves code maintainability?

Use more verbose names for variables

Use double quotes instead of single quotes to enclose variables

Use different indent levels for variables

Use more verbose names for variables

An architect must optimize traffic that targets a popular API endpoint Currently, the application downloads a large file hourly, but often the file is unchanged and the download causes unnecessary load and delays Which cURL command must be used to determine the last modified date of the file and to optimize the API usage?

curl -H 'Cache-Control: no-cache' request

Refer to the exhibit. A developer created a Python script to retrieve information about Meraki devices in a local network deployment After requesting a security review of the code the security analyst has observed poor secret storage practices What is the appropriate secret storage approach''

Leverage an external secret vault to retrieve MER_APl_KEY and set the vault key as an OS environment variable before running the code

Set the Base64 encoded version of the API key as MER_API_KEY m the code and Base64 decode before using m the header

Leverage an external secret vault to retrieve MER_API_KEY and embed the vault key as a new variable before running the code

Leverage an external secret vault to retrieve MER_APl_KEY and set the vault key as an OS environment variable before running the code

Set an OS environment variable for MER_API_KEY to the API key before running the code and no longer set MER_API_KEY within the code

When an application is designed that requires high availability, what is a reason to use a cross-region cloud?

Provide disaster recovery protection

Protect from a single component failure

Account for failure in another zone

Refer to the exhibit. A Docker swarm cluster is configured to load balance services across data centers in three different geographical regions west central and east. The cluster has three manager nodes and three worker nodes Anew service named cisco.devnet is being deployed. The service has these design requirements• All containers must be hosted only on nodes in the central region• The service must run only on nodes that are ineligible for the manager role Which approach fulfills the requirements?

Enable the control flag in the containers of the west and east regions to prevent the service from starting

Create a second swarm cluster that is hosted only in the central region.

Create the service manually in the central region and set replicas to 0.

Use placement constraints to control nodes to which the service can be assigned.

Enable the control flag in the containers of the west and east regions to prevent the service from starting

Refer to the exhibit. Refer to the exhibit A Docker swarm service is currently running m a local data center The service is hosting an HTML website it the container fads then the service becomes unavailable The design must meet these requirements• The service must be highly available and resilient against a data center outage.• The service must be accessible from a single URL• The HTTP session must remain on the server from which the original request was sent• Failure of the server must force the client to reconnectWhich two design approaches must be used to meet the requirements? (Choose two.)

Create another node in the swarm duster to scale the service across the nodes over two replicas.

Configure an external load balancer to route requests to the swarm service by using session persistence

Create another swarm cluster within a data center and deploy a secondary instance of the service.

Create another node in the swarm duster to scale the service across the nodes over two replicas.

Configure an external load balancer to route requests to the swarm service by using session persistence

Scale the Docker swarm service to 2 and set endpoint-mode to DNSRR instead of the default value of VIP

Configure a routing mesh to route requests to the swarm service by using NAT on the network side

A developer must deploy a containerized application foe network device inventory management.The developer sets up a Kubernetes duster on two separate hypervisors. The SLA is not currently meeting a specified maximum value for network latencyjitter CPU/memory and disk I/O are functioning property. Which two design approaches resolve the issue'' (Choose two.)

Colocate services in the same pod

Replace the HDD drives with SSD drives

Deploy the duster to a bare metal server

A developer deploys a web application in a local data center that is now experiencing high traffic load from users accessing data through REST API calls. Which approach enhances the responsiveness and performance of the API?

Use HTTP standard authorization header to submit authentication credentials

Use HTTP POST or other non-read methods for read requests when possible

Ensure that all read requests are clearly identified by the PUT method

Configure API payload to return errors in HTTP 200 responses

Use HTTP standard authorization header to submit authentication credentials

A custom dashboard of the network health must be created by using Cisco DNA Center APIs An existing dashboard is a RESTful API that receives data from Cisco DNA Center as a new metric every time the network health information is sent from the script to the dashboard Which set of requests creates the custom dashboard?

GET request to Cisco DNA Center to obtain the network health information and then a POST request to the dashboard to publish the new metric

PUT request to Cisco DNA Center to obtain the network health information and then a POST request to the dashboard to publish the new metric

POST request to Cisco DNA Center to obtain the network health information and then a GET request to the dashboard to publish the new metric

GET request to Cisco DNA Center to obtain the network health information and then a PUT request to the dashboard to publish the new metric

GET request to Cisco DNA Center to obtain the network health information and then a POST request to the dashboard to publish the new metric

What are two building blocks of the 12-factor app? (Choose two.)

Easy access to underlying systems

A developer releases a new application for network automation of Cisco devices deployed m a local data center. The application utilizes complex design patterns such as microservices that host multiple third-party libraries and programming languages. The development must be simplified by implementing an observability-driven development lifecycle Which two considerations must be taken to meet the requirements? (Choose two.)

description of low-level errors

identifying customer priorities

Refer to the exhibit. An engineer writes a script to retrieve data from a REST API and must build support for cases where the response that contains data from the server may take a longer time than normal Which code must be added to the snippet where the code is missing to catch such a timeout?

request.exeception.ConnectTimeout

Refer to the exhibit. The application follows a containerized microservices architecture that has one container per microservice. The microservices communicate with each other by using REST APIs The doubleheaded arrows m the diagram display chains of synchronous HTTP calls needed for a single use/request Which action ensures the resilience of the application in the scope of a single user request'

Redesign the application to be separated into these three layers Presentation. API. and Data

Implement retries with exponential backoff during HTTP API calls

Set up multiple instances of each microservice m active/active mode by using the Orchestrator

Create two virtual machines that each host an instance of the application and set up a cluster

What is the result of a successful OAuth2 authorization grant flow?

The application is provided with a token that allows actions on services on the user's behalf

The user has the application rights that correspond to the user's role within the application's database

The application is provided with a token that allows actions on services on the user's behalf

The user has administrative rights to the application's backend services

The third-party service is provided with a token that allows actions to be performed

A timeframe custom dashboard must be developed to present data collected from Cisco Meraki. The dashboard must include a wireless health alert count. What needs to be built as a prerequisite?

A publicly available HTTP server to receive Meraki Webhooks from the Meraki Dashboard API

A publicly available HTTP server to receive Meraki Webhooks from the Meraki Scanning API

A daemon to consume the Wireless Health endpoint of the Meraki Scanning API

A daemon to consume the Wireless Health endpoint of the Meraki Dashboard API

An application has these characteristics• provide one service or function• distributed database• API gateway• central repository for code• configuration database• uses session managementWhich two design approaches contribute to the scalability of the application'? (Choose two )

session management in a stateless architecture

distributed computing with tightly coupled components

built to scale based on a star topology

session management in a stateless architecture

planned before the first device is deployed

distributed computing with tightly coupled components

Cisco 350-901 Practice Test 6 - Free Online Exam Prep & Questions

Refer to the exhibit.

Cisco 350-901 image Question 201 118513 10102024233131000000

An attempt to execute a CI/CD pipeline results m the error shown What is the cause of the error?

Become a Premium Member for full access

Unlock Premium Member

Cisco 350-901 Practice Test 6

Question

Cisco 350-901 Practice Tests

Practice Tests