Developing Applications using Cisco Core Platforms and APIs (DEVCOR) practice questions

1. Question 1 of 25

   

   Refer to the exhibits which show the documentation associated with the create port object API call in Cisco Firepower Threat Defense, and a cURL command.

   

   Which data payload completes the cURL command to run the API call?

   • A"icmpv4Type": "ANY", "name": "string", "type": "icmpv4portobject"
   • B"description": "This is an ICMP Echo", "icmpv4Code": "8", "icmpv4Type": "Echo", "isSystemDefined": true, "name": "ICMP Echo", "version": "2.2"
   • C"description": "string", "icmpv4Code": "ANY_IPV4", "icmpv4Type": "ANY", "id": "string", "isSystemDefined": "string", "name": "string", "type": "icmpv4portobject", "version": "string"
   • D"description": "string", "icmpv4Code": "ANY_IPV4", "icmpv4Type": null, "isSystemDefined": true, "name": "string", "type": "icmpv4portobject"

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   A is correct. Why the others answers aren't correct: B - name": "ICMP Echo" > can't contain spaces C - "isSystemDefined": "string" = boolean D - "icmpv4Type": null > can't be null

   Adapted from community discussion by designated · 2024-09-07 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • cisco.com documentation

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. D

      duracell

      2024-01-03

      Selected A8 upvotes

      A is corret, minimal requiremts are given. C is incorrect since "isSystemDefined" must be boolean true/false.

   2. D

      designated

      2024-09-07

      Selected A5 upvotes

      A is correct. Why the others answers aren't correct: B - name": "ICMP Echo" > can't contain spaces C - "isSystemDefined": "string" = boolean D - "icmpv4Type": null > can't be null

   3. V

      valbonarexhepi

      2024-01-24

      3 upvotes

      B is incorrect. icmpv4Type, name & type are required. B does not contain "type". A is correct.

   4. A

      a95c730

      2025-02-07

      Selected A1 upvote

      "name", "icmpv4Type", "type" are Required fields in payload, others responses don't meet Requirements

2. Question 2 of 25

   DRAG DROP - Drag and drop the code from the bottom onto the box where the code is missing to retrieve and display wireless network health information. The wireless network devices are being managed by Cisco DNA Center and are compatible with REST API. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   api/v1/network-health" 'x-auth-token': token, "category" "Wireless You have "wireless" in the option Description:Returns Overall Network Health information by Device category (Access, Distribution, Core, Router, Wireless) for any given point of time https://developer.cisco.com/docs/dna-center/#!get-overall-network-health

   Adapted from community discussion by Boboche · 2024-07-13 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • cisco.com documentation
   • cisco.com documentation

   Answer figure

   

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. R

      rhmgh

      2024-03-04

      20 upvotes

      api/v1/network-health" 'x-auth-token': token, "category" "Wireless"

   2. D

      designated

      2024-09-07

      3 upvotes

      /dna/intent/api/v1/network-health/healthDistirubution/Wireless 1. network_health 2. X-Auth-Token: token 3. category 4. Wireless - Device category (Access, Distribution, Core, Router, Wireless) https://developer.cisco.com/docs/dna-center/#!get-overall-network-health

   3. B

      Boboche

      2024-07-13

      2 upvotes

      api/v1/network-health" 'x-auth-token': token, "category" "Wireless You have "wireless" in the option Description:Returns Overall Network Health information by Device category (Access, Distribution, Core, Router, Wireless) for any given point of time https://developer.cisco.com/docs/dna-center/#!get-overall-network-health

   4. C

      CiscoRider

      2024-05-25

      2 upvotes

      The correct order is: 1. Api/v1/network-health 2. X-auth-token: token 3. category 4. Distribution For healthDistriubution, the category parameter can only be "Access, Distribution, Router". Wireless is not an option here: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/DEVNET-2878.pdf

3. Question 3 of 25

   A Cisco Catalyst 9000 switch has guest shell enabled. Which Linux command installs a third-party application?

   • Aapt-get install <package-name>
   • Bzypper install <package-name>
   • Cyum install <package-name>
   • Ddnf install <package-name>

   Show answer

   Correct answer: C

   How others answered

   • C100%

   Explanation

   Correct answer: C You can install other Python libraries such as, Python Version 3.0 during runtime using the Yum utility in CentOS 8.0. You can also install or update python packages using PIP. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/171/b_171_programmability_cg/guest_shell.html#id_45860

   Adapted from community discussion by Teringzooi · 2024-09-28 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion3

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. T

      Teringzooi

      2024-09-28

      Selected C2 upvotes

      Correct answer: C You can install other Python libraries such as, Python Version 3.0 during runtime using the Yum utility in CentOS 8.0. You can also install or update python packages using PIP. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/171/b_171_programmability_cg/guest_shell.html#id_45860

   2. B

      bboycoi

      2024-05-22

      1 upvote

      C is correct The Guest Shell container allows users to run their scripts and apps on the system. The Guest Shell container on Intel x86 platforms will be a Linux container (LXC) with a CentOS 7.0 minimal rootfs. You can install other Python libraries such as, Python Version 3.0 during runtime using the Yum utility in CentOS 7.0. You can also install or update python packages using PIP. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/1612/b_1612_programmability_cg/guest_shell.html

   3. D

      designated

      2024-08-22

      Selected C1 upvote

      C is correct: Supported Rootfs: SSH, Yum install, and Python PIP install https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/171/b_171_programmability_cg/guest_shell.html

4. Question 4 of 25

   There is a requirement to securely store unique usernames and passwords. Given a valid username, it is also required to validate that the password provided is correct. Which action accomplishes this task?

   • AEncrypt the username, hash the password, and store these values.
   • BHash the username, hash the password, and store these values.
   • CEncrypt the username, encrypt the password, and store these values.
   • DHash the username, encrypt the password, and store these values.

   Show answer

   Correct answer: A

   How others answered

   • A74%
   • B26%

   Only 74% agreed on this answer — treat it as contested rather than settled.

   Explanation

   A is correct. Because username must be unique: Fact #1: If you hash the username, it'll become irreversible. Fact #2: It is possible for two different string to produce the same hash. Which means when you hash the username, you cannot be 100% sure it's unique anymore. With encryption however you'll be able to reverse the username stored in db, and compare it with the username. https://learn.microsoft.com/en-us/dotnet/api/system.string.gethashcode?view=net-6.0#definition

   Adapted from community discussion by NetGirl · 2024-10-01 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. N

      NetGirl

      2024-10-01

      Selected A14 upvotes

      A is correct. Because username must be unique: Fact #1: If you hash the username, it'll become irreversible. Fact #2: It is possible for two different string to produce the same hash. Which means when you hash the username, you cannot be 100% sure it's unique anymore. With encryption however you'll be able to reverse the username stored in db, and compare it with the username. https://learn.microsoft.com/en-us/dotnet/api/system.string.gethashcode?view=net-6.0#definition

   2. Q

      QuiShong

      2024-06-15

      3 upvotes

      You don't want to encrypt the password. Encryption is reversible. You always want to hash the password.

   3. B

      bboycoi

      2024-05-23

      3 upvotes

      I chose D: Hash username == Unique, encryption is a must for password

   4. S

      Safinok

      2024-09-28

      1 upvote

      Wrong, and how you will take DevNet Pro when you say encrypt the password? This such comments should never has been approved or existed.

5. Question 5 of 25

   

   Refer to the exhibit. What is the missing step in deploying a Docker container to IOx?

   • ABuild the package.yaml file.
   • BPull/push the image to the Docker registry.
   • CBuild the package.cert file to sign the app.
   • DLog in to Device Manager.

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   "A" is the correct answer. see: https://www.cisco.com/c/en/us/support/docs/routers/1101-industrial-integrated-services-router/214383-build-and-deploy-a-docker-iox-package-fo.html "The container is ready to be packaged. Before you can ask ioxclient to do this, you first need to create the package descriptor: package.yaml."

   Adapted from community discussion by [Removed] · 2023-12-09 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. D

      designated

      2024-08-22

      Selected A3 upvotes

      A is correct: ### Build and Deploy a Docker IOx Package ### 1. Install and Prepare IOx Client on the Linux Host - You need ioxclient in order to package the Docker container as an IOx package once it's built, so let's prepare this first. 2. Install and Prepare the Docker Environment on the Linux Build Machine - This Docker is used to build a container from the Alpine base image and to include the necessary files for the use case. 3. Install the QEMU User Emulation Packages - After you have installed Docker, you need to install the QEMU user emulators.

   2. L

      lente_kriebels

      2023-08-22

      5 upvotes

      Answer is A. https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/iox/211534-Configure-a-Small-Alpine-Linux-Docker-Im.html

   3. [

      [Removed]

      2023-12-09

      4 upvotes

      "A" is the correct answer. see: https://www.cisco.com/c/en/us/support/docs/routers/1101-industrial-integrated-services-router/214383-build-and-deploy-a-docker-iox-package-fo.html "The container is ready to be packaged. Before you can ask ioxclient to do this, you first need to create the package descriptor: package.yaml."

   4. T

      Teringzooi

      2024-09-28

      Selected A3 upvotes

      Correct answer: A 1. Install and Prepare IOx Client on the Linux Host 2. Install and Prepare the Docker Environment on the Linux Build Machine 3. Install the QEMU User Emulation Packages 4. Test if an aarch64/ARV64v8 Container Runs on x86 Linux Machine. 5. Prepare Files to Build the Docker Webserver Container 6. Build the Docker Container 7. Build the IOx Package

6. Question 6 of 25

   Select 2

   

   Refer to the exhibit. A company has extended networking from the data center to the cloud through Transit VPC. Which two statements describe the benefits of this approach? (Choose two.)

   • ADynamic routing combined with multi-AZ deployment creates a robust network infrastructure.
   • BVPC virtual gateways provide highly available connections to virtual networks.
   • CDedicated VPC simplifies load balancing by combining internal and external web services.
   • DVPC virtual gateways provide more secure connections to virtual networks.
   • EDedicated VPC simplifies routing by not combining this service with other shared services.

   Show answer

   Correct answer: A, E

   How others answered

   • AE100%

   Explanation

   Apologies for the wrong initial comment. The correct answers are A and E. I actually found where this question came from. It's a video from a cisco engineer and the 2 bullet points listed by the Cisco's presenter are the following: * Simplified routing by not combining with other shared services. * Dynamic routing combined with multi-AZ deployment creates a robust network infrastructure. PS: it also mentions that VPC virtual gateways provide highly available connections to transit VPC virtual network appliances, not "virtual networks" so B is incorrect. reference: https://www.youtube.com/watch?v=MPQLKyhN-rU (fast-forward to 1:15 min)

   Adapted from community discussion by Bloody_sausage · 2021-10-28 · 28 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • cisco.com documentation
   • Cisco documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. B

      Bloody_sausage

      2021-10-28

      28 upvotes

      Apologies for the wrong initial comment. The correct answers are A and E. I actually found where this question came from. It's a video from a cisco engineer and the 2 bullet points listed by the Cisco's presenter are the following: * Simplified routing by not combining with other shared services. * Dynamic routing combined with multi-AZ deployment creates a robust network infrastructure. PS: it also mentions that VPC virtual gateways provide highly available connections to transit VPC virtual network appliances, not "virtual networks" so B is incorrect. reference: https://www.youtube.com/watch?v=MPQLKyhN-rU (fast-forward to 1:15 min)

   2. A

      architect_

      2022-05-18

      6 upvotes

      A and E. https://blogs.cisco.com/cloud/how-a-multicloud-world-is-changing-the-wan

   3. T

      Teringzooi

      2023-09-29

      Selected A, E4 upvotes

      Correct answers: A & E * Simplified routing by not combining with other shared services. * Dynamic routing combined with multi-AZ deployment creates a robust network infrastructure. https://blogs.cisco.com/cloud/how-a-multicloud-world-is-changing-the-wan

   4. B

      Bloody_sausage

      2021-10-28

      2 upvotes

      It's B and E. D is incorrect because the number of secure connections is not a benefit of this solution. It is the fact that we're simplifying routing by adding a virtual infrastructure in the middle that is transparent to the branches through the VPN connection and that it is highly available. "Benefits of the AWS Transit Gateway Solution * The Transit Gateway solution is scalable and resilient. * The Transit Gateway solution is a managed service. That is, high availability and monitoring is built-in, and you can track the solution using metrics like CloudWatch. (B) * By using the Transit Gateway solution, you can simplify your network architecture, thereby reducing the operational cost. (C) You can centrally manage your solution, including security. Reference: https://www.cisco.com/c/en/us/td/docs/routers/csr1000/software/aws/b_csraws_transitVPC/Deploying_Transit_Gateway_Solution.html

7. Question 7 of 25

   A developer has just completed the configuration of an API that connects sensitive internal systems. Based on company policies, the security of the data is a high priority. Which approach must be taken to secure API keys and passwords?

   • AEmbed them directly in the code.
   • BStore them in a hidden file.
   • CStore them inside the source tree of the application.
   • DChange them periodically.

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Explanation

   I go with "D. Change them periodically." "Do not embed API keys or signing secrets directly in code. Do not store API keys or signing secrets in files inside your application's source tree." https://developers.google.com/maps/api-key-best-practices

   Adapted from community discussion by FR99 · 2020-08-18 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Google developer documentation
   • cisco.com documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. F

      FR99

      2020-08-18

      5 upvotes

      I go with "D. Change them periodically." "Do not embed API keys or signing secrets directly in code. Do not store API keys or signing secrets in files inside your application's source tree." https://developers.google.com/maps/api-key-best-practices

   2. F

      flambadone

      2020-10-06

      3 upvotes

      I'm going to say that it's probably 'D' because it says "Based on your company's policies" - which would dictate something like regularly changing keys and rotation of passwords. If I had to throw a dart, a static hidden file is less secure than a key that changes often.

   3. A

      architect_

      2021-05-18

      3 upvotes

      "D" https://blogs.cisco.com/developer/dna-center-api-authentication-with-vault

   4. D

      dexilec82

      2022-02-22

      2 upvotes

      A. - you are essentially exposing it B. - you can hide but you cannot run remember the hackers are good at finding hidden objects. C. - why would you store it on the source tree, a giveaway? D. - Change them periodically makes sense and in fact every companies general policy is to change password periodically.

8. Question 8 of 25

   

   Refer to the exhibit. A kubeconfig file to manage access to clusters is provided. How many clusters are defined and which of them are accessed using username/password authentication versus certificate?

   • Atwo clusters; scratch
   • Bthree clusters; scratch
   • Cthree clusters; development
   • Dtwo clusters; development

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   I agree. Answer is A. Two Clusters are defined: Development and Scratch. The Scratch Cluster is set to use a username and password.

   Adapted from community discussion by blezzzo · 2021-09-01 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Kubernetes documentation

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. B

      blezzzo

      2021-09-01

      6 upvotes

      I agree. Answer is A. Two Clusters are defined: Development and Scratch. The Scratch Cluster is set to use a username and password.

   2. T

      Teringzooi

      2023-09-29

      Selected A3 upvotes

      Correct answer: A Two clusters: development and scratch scratch: user/pass development: certificate authentication https://kubernetes.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/

   3. F

      ferock

      2023-05-04

      Selected A3 upvotes

      Two clusters: development and scratch scratch: user/pass development: certificate authentication

   4. A

      architect_

      2022-05-15

      3 upvotes

      Agree with Answer A. https://kubernetes.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/

9. Question 9 of 25

   DRAG DROP - Drag and drop the code from the bottom onto the box where the code is missing on the Ansible task to enable a VLAN on a Meraki MX device. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   Meraki does not support PATCH. The method is PUT when reading the API swagger. When is used with Loop and evals a boolean but here we have a list. PUT and oop.

   Adapted from community discussion by tommiy · 2022-03-15 · 18 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • cisco.com documentation
   • cisco.com documentation
   • cisco.com documentation

   Answer figure

   

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

   1. T

      tommiy

      2022-03-15

      18 upvotes

      Meraki does not support PATCH. The method is PUT when reading the API swagger. When is used with Loop and evals a boolean but here we have a list. PUT and oop.

   2. T

      tswinn

      2022-03-05

      15 upvotes

      Correcion: 1: PUT 2: LOOP https://developer.cisco.com/codeexchange/github/repo/sttrayno/Meraki-Ansible-Deployment/

   3. D

      designated

      2023-03-05

      3 upvotes

      It should be PUT and loop Note: There is no PATCH operation for Meraki devices. https://developer.cisco.com/meraki/api-latest/#!update-network-appliance-vlans-settings But Ansible documentation is saying this as a note: "Meraki’s API defaults to networks having VLAN support disabled and there is no way to enable VLANs support in the API. VLAN support must be enabled manually." https://docs.ansible.com/ansible/latest/collections/cisco/meraki/meraki_mx_vlan_module.html#ansible-collections-cisco-meraki-meraki-mx-vlan-module

   4. L

      lente_kriebels

      2022-03-07

      2 upvotes

      i think it should be : 1: Method:PATCH (update current vlan to enabled, and leave other settings) 2: loop: "{{ results. results }}" (loop through all vlans)

10. Question 10 of 25

    Which tool is used to deploy an IOx application to a group of IOx devices at one time?

    • Aioxclient
    • BIOx local manager
    • CFog Network Director
    • DKubernetes

    Show answer

    Correct answer: C

    How others answered

    • C86%

    Explanation

    Fog Director delivers the capability to manage large-scale production deployments of IOx-enabled fog applications. Control the IOx application lifecycle from initial deployment through ongoing change management and application retirement. Choose to use the product functionality through a visual web environment or integrate with existing management systems through APIs. Fog Director supports both application centric and network infrastructure centric views to optimize productivity. https://www.cisco.com/c/en/us/products/cloud-systems-management/fog-director/index.html

    Adapted from community discussion by ferock · 2023-11-05 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. F

       ferock

       2023-11-05

       Selected C2 upvotes

       Fog Director delivers the capability to manage large-scale production deployments of IOx-enabled fog applications. Control the IOx application lifecycle from initial deployment through ongoing change management and application retirement. Choose to use the product functionality through a visual web environment or integrate with existing management systems through APIs. Fog Director supports both application centric and network infrastructure centric views to optimize productivity. https://www.cisco.com/c/en/us/products/cloud-systems-management/fog-director/index.html

    2. T

       Teringzooi

       2024-03-29

       Selected C2 upvotes

       Correct answer: C Cisco Fog Director enables the management of IOx nodes at scale. It provides easy and intuitive workflows that you use to perform activities that include installing, starting, stopping, upgrading, and monitoring apps across multiple Cisco devices. https://developer.cisco.com/docs/iox/#!fog-director-api

    3. D

       designated

       2024-02-23

       Selected C2 upvotes

       C is correct Cisco Fog Director enables the management of IOx nodes at scale. It provides easy and intuitive workflows that you use to perform activities that include installing, starting, stopping, upgrading, and monitoring apps across multiple Cisco devices. https://developer.cisco.com/docs/iox/#!fog-director-api

    4. F

       Fedesarucho

       2024-10-30

       1 upvote

       after 3 months: The tool that is used to deploy an IOx application to a group of IOx devices at one time is option C: Fog Network Director. Fog Network Director (FND) is a network management platform provided by Cisco for managing and deploying IOx applications to a group of IOx devices. It allows administrators to manage the lifecycle of IOx applications, including deployment, monitoring, and upgrading, all from a single web-based interface.

11. Question 11 of 25

    Which command is used to enable application hosting on a Cisco IOS XE device?

    • Aiox
    • Bapplication-hosting
    • Ciox-service
    • Dapp-hosting

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    1. Create a TAR file from the Docker container (on a Linux box): $ docker save iox_app -o iox_app.tar 2. Enable the IOx subsystem on a network device: Device(config)#iox 3. Tune the container settings (networking, resources, Docker options) in the “app-hosting appid” configuration section 4. - Install the application container image (resources are not committed to the application yet): Device# app-hosting install appid iox_app package usbflash1:iox_app.tar 5. Activate the application (required resources will be committed to the application): Device# app-hosting activate appid iox_app 6. Start the application: Device# app-hosting start appid iox_app Source: Cisco DEVCOR 350-901 Study Guide

    Adapted from community discussion by ferock · 2024-05-05 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. D

       designated

       2024-08-22

       Selected A1 upvote

       A is correct. The following steps summarize the application hosting lifecycle: - Create a TAR file from the Docker container (on a Linux box): $ docker save iox_app -o iox_app.tar - Enable the IOx subsystem on a network device: Device(config)#iox - Tune the container settings (networking, resources, Docker options) in the “app-hosting appid” configuration section (refer to the IOS XE Programmability Configuration Guide). - Install the application container image (resources are not committed to the application yet): Device# app-hosting install appid iox_app package usbflash1:iox_app.tar - Activate the application (required resources will be committed to the application): Device# app-hosting activate appid iox_app - Start the application: Device# app-hosting start appid iox_app - (When completed) stop the application: Device# app-hosting stop appid iox_app - Deactivate all the resources allocated for the application: Device# app-hosting deactivate appid iox_app - Uninstall the application: Device# app-hosting uninstall appid iox_app

    2. F

       ferock

       2024-05-05

       Selected A2 upvotes

       1. Create a TAR file from the Docker container (on a Linux box): $ docker save iox_app -o iox_app.tar 2. Enable the IOx subsystem on a network device: Device(config)#iox 3. Tune the container settings (networking, resources, Docker options) in the “app-hosting appid” configuration section 4. - Install the application container image (resources are not committed to the application yet): Device# app-hosting install appid iox_app package usbflash1:iox_app.tar 5. Activate the application (required resources will be committed to the application): Device# app-hosting activate appid iox_app 6. Start the application: Device# app-hosting start appid iox_app Source: Cisco DEVCOR 350-901 Study Guide

    3. R

       rhmgh

       2024-02-24

       2 upvotes

       Enabling Cisco IOx Perform this task to enable access to Cisco IOx, which provides a CLI-based user interface that you can use to manage, administer, monitor, and troubleshoot the apps on the host system, and to perform a variety of related activities. SUMMARY STEPS enable configure terminal iox username name privilege level password {0 | 7 | user-password}encrypted-password end

    4. T

       Teringzooi

       2024-09-29

       Selected A2 upvotes

       Correct answer: A https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/171/b_171_programmability_cg/application_hosting.html#id_64005

12. Question 12 of 25

    DRAG DROP - Drag and drop the steps from the left into the order on the right to configure and install a container on a Cisco Catalyst 9000 Series Switch. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    Correct answer: 1. IOX 2. Install 3. Activate 4. Start Device(config)#iox Device# app-hosting install appid iox_app package usbflash1:iox_app.tar Device# app-hosting activate appid iox_app Device# app-hosting start appid iox_app ! Device# app-hosting stop appid iox_app Device# app-hosting deactivate appid iox_app Device# app-hosting uninstall appid iox_app

    Adapted from community discussion by Teringzooi · 2024-09-29 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • Cisco documentation

    Answer figure

    

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. T

       Teringzooi

       2024-09-29

       4 upvotes

       Correct answer: 1. IOX 2. Install 3. Activate 4. Start Device(config)#iox Device# app-hosting install appid iox_app package usbflash1:iox_app.tar Device# app-hosting activate appid iox_app Device# app-hosting start appid iox_app ! Device# app-hosting stop appid iox_app Device# app-hosting deactivate appid iox_app Device# app-hosting uninstall appid iox_app

    2. G

       G_I_Pet3r

       2024-07-06

       1 upvote

       IOx Install Activate Start Enabling Application Hosting Framework: Application Hosting framework is not enabled by default. Following is IOS XE CLI Config to enable App hosting infrastructure: cat9k# conf t cat9k(config)# iox The application lifecycle on the Cisco Catalyst 9000 series switches consists of three stages: • Install: Installing application on the device. Resources needed by the application are not yet committed to it. • Activate: Committing the HW resources required by the application. • Start: Putting the application is now running state. https://developer.cisco.com/docs/app-hosting/#!getting-cat9k-setup/enabling-application-hosting-framework https://www.cisco.com/c/dam/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c87-742415.pdf

    3. D

       designated

       2024-08-22

       2 upvotes

       The correct answer are 1. iox 2. install 3. activate 4. start Device(config)#iox Device# app-hosting install appid iox_app package usbflash1:iox_app.tar Device# app-hosting activate appid iox_app Device# app-hosting start appid iox_app ! Device# app-hosting stop appid iox_app Device# app-hosting deactivate appid iox_app Device# app-hosting uninstall appid iox_app Source: Cisco DEVCOR 350-901 Study Guide

    4. F

       ferock

       2024-05-05

       3 upvotes

       1. IOX 2. app-hosting install 3. app-hosting activate 4. app-hosting start Source: Cisco DEVCOR 350-901 Study Guide

13. Question 13 of 25

    Which database type should be used to store data received from model-driven telemetry?

    • ABigQuery database
    • BTime series database
    • CNoSQL database
    • DPostgreSQL database

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    I'll Go with B on this one. A time series database is a software system that is optimized for storing and serving time series through associated pairs of time and value. In some fields, time series may be called profiles, curves, traces or trends.

    Adapted from community discussion by blezzzo · 2022-09-01 · 15 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. B

       blezzzo

       2022-09-01

       15 upvotes

       I'll Go with B on this one. A time series database is a software system that is optimized for storing and serving time series through associated pairs of time and value. In some fields, time series may be called profiles, curves, traces or trends.

    2. F

       ferock

       2024-05-06

       Selected B3 upvotes

       Time-series databases (TSDBs) are specifically built for handling metrics, events, or measurements that are time-stamped. TSDBs have some unique properties that make them suitable for real-time and historical data analytics, like data lifecycle management (aggregating and downsampling into longer-term trend data), data summarization, the ability to handle large time series–dependent scans of many records, and so on. This is the typical database type to store sensor and telemetry data. Popular time-series databases include InfluxDB and Amazon Timestream. Source: Cisco DEVCOR 350-901 Study Guide

    3. P

       phc1978

       2023-06-02

       3 upvotes

       Answer :- A Database:- 1) relational - enforce integrity structured query language tabular format focuses on row oracle 2) document database :- mangodb,cosmosdb unstructured unstructured JSON data 3) graph database :- Nio4j relate objects 4) Columnar database :- table structure column level database focus on column ( like adding the column values) 5) Time-Series database :- model driven ,streaming telemetry data with dates and times always start with first columns dateTime debugs,syslogs,logs

    4. C

       CertifiedGoogler

       2022-10-09

       4 upvotes

       Never mind, please ignore this ^ 'B' is the correct answer, I had misread the question. Apologies

14. Question 14 of 25

    A heterogeneous network of vendors and device types needs automating for better efficiency and to enable future automated testing. The network consists of switches, routers, firewalls and load balancers from different vendors, however they all support the NETCONF/RESTCONF configuration standards and the YAML models with every feature the business requires. The business is looking for a buy versus build solution because they cannot dedicate engineering resources, and they need configuration diff and rollback functionality from day 1. Which configuration management for automation tooling is needed for this solution?

    • AAnsible
    • BAnsible and Terraform
    • CNSO
    • DTerraform
    • EAnsible and NSO

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    This is where Cisco rubs "hypocrite" on our faces! I doubt anyone thinks NSO is good for anything other than Cisco (and maybe not even that), however, because this is a Cisco certification, you kind of have to concede that whatever Cisco offering is the best option out there... So yeah, pick NSO and shut up.

    Adapted from community discussion by __al__ · 2022-09-19 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. J

       JCGO

       2021-01-15

       16 upvotes

       C for me. NSO without Ansible. NSO is for all that stuff in question. and 'buy versus build'

    2. L

       leonmflai4exam

       2021-01-16

       12 upvotes

       Is it E? https://www.cisco.com/c/dam/m/en_us/network-intelligence/service-provider/digital-transformation/knowledge-network-webinars/pdfs/1012-oaa-ckn.pdf

    3. B

       Bloody_sausage

       2021-04-30

       5 upvotes

       It'e E: https://www.cisco.com/c/dam/m/en_us/network-intelligence/service-provider/digital-transformation/knowledge-network-webinars/pdfs/1012-oaa-ckn.pdf

    4. _

       __al__

       2022-09-19

       4 upvotes

       This is where Cisco rubs "hypocrite" on our faces! I doubt anyone thinks NSO is good for anything other than Cisco (and maybe not even that), however, because this is a Cisco certification, you kind of have to concede that whatever Cisco offering is the best option out there... So yeah, pick NSO and shut up.

15. Question 15 of 25

    

    Refer to the exhibit. Which RESTCONF verb changes the GigabitEthernet2 interface from 192.168.100.1/24 to 10.10.10.1/24?

    • APOST
    • BPATCH
    • CGET
    • DHEAD

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    HTTPs Methods The https-based protocol-RESTCONF (RFC 8040), which is a stateless protocol, uses secure HTTP methods to provide CREATE, READ, UPDATE and DELETE (CRUD) operations on a conceptual datastore containing YANG-defined data, which is compatible with a server that implements NETCONF datastores. The following table shows how the RESTCONF operations relate to NETCONF protocol operations: OPTIONS SUPPORTED METHODS GET Read PATCH Update PUT Create or Replace POST Create or Operations (reload, default) DELETE Deletes the targeted resource HEAD Header metadata (no response body) https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/166/b_166_programmability_cg/restconf_prog_int.pdf

    Adapted from community discussion by jjkcoins · 2023-09-12 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. D

       designated

       2024-08-25

       Selected B4 upvotes

       B is correct since the question is asking to change an existing value (from 192.168.100.1/24 to 10.10.10.1/24) The following table shows how the RESTCONF operations relate to NETCONF protocol operations: GET = Read PATCH = Update PUT = Create or Replace POST = Create or Operations (reload, default) DELETE = Deletes the targeted resource HEAD = Header metadata (no response body)

    2. C

       cj_kuo

       2023-12-10

       Selected B4 upvotes

       Regarding to the Cisco DEVCOR 350-091 Study Guide Page 138, the Answer should be B. PATCH.

    3. J

       jjkcoins

       2023-09-12

       2 upvotes

       HTTPs Methods The https-based protocol-RESTCONF (RFC 8040), which is a stateless protocol, uses secure HTTP methods to provide CREATE, READ, UPDATE and DELETE (CRUD) operations on a conceptual datastore containing YANG-defined data, which is compatible with a server that implements NETCONF datastores. The following table shows how the RESTCONF operations relate to NETCONF protocol operations: OPTIONS SUPPORTED METHODS GET Read PATCH Update PUT Create or Replace POST Create or Operations (reload, default) DELETE Deletes the targeted resource HEAD Header metadata (no response body) https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/166/b_166_programmability_cg/restconf_prog_int.pdf

    4. T

       Teringzooi

       2024-10-02

       Selected B2 upvotes

       Correcft answer: B Patch = update Post = create or operation like reload GET = Read PATCH = Update PUT = Create or Replace POST = Create or Operations (reload, default) DELETE = Deletes the targeted resource HEAD = Header metadata (no response body) https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/168/b_168_programmability_cg/RESTCONF.pdf

16. Question 16 of 25

    DRAG DROP - Drag and drop the code from the bottom onto the box where the code is missing to delete a host object by using the Cisco Firepower Device Manager API. Not all options are used.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    answer: f’{BASE_URL}/object/networks/{ID}’ f’Bearer {token}’, “DELETE” from: https://developer.cisco.com/docs/ftd-api-reference/latest/#!deletenetworkobject curl -X DELETE \ --header "Accept: application/json" \ --header "Authorization: Bearer ${ACCESS_TOKEN}" \ "https://${HOST}:${PORT}/api/fdm/v6/object/networks/{objId}"

    Adapted from community discussion by Ch33s3y · 2024-01-10 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation
    • Cisco documentation

    Answer figure

    

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. F

       Fedesarucho

       2023-03-22

       4 upvotes

       from this page: https://www.cisco.com/c/en/us/td/docs/security/firepower/660/api/REST/firepower_management_center_rest_api_quick_start_guide_660/Objects_In_The_REST_API.html#reference_nn3_zff_bcb i think answer is correct

    2. C

       Ch33s3y

       2024-01-10

       3 upvotes

       answer: f’{BASE_URL}/object/networks/{ID}’ f’Bearer {token}’, “DELETE” from: https://developer.cisco.com/docs/ftd-api-reference/latest/#!deletenetworkobject curl -X DELETE \ --header "Accept: application/json" \ --header "Authorization: Bearer ${ACCESS_TOKEN}" \ "https://${HOST}:${PORT}/api/fdm/v6/object/networks/{objId}"

    3. N

       network_enthusiast

       2024-01-18

       2 upvotes

       I withdraw my previous answer. Right answer will be /api/fdm/latest/object/networks/{objectId}

    4. W

       williamluo

       2024-11-08

       1 upvote

       curl -X DELETE \ --header "Accept: application/json" \ --header "Authorization: Bearer ${ACCESS_TOKEN}" \ "https://${HOST}:${PORT}/api/fdm/v6/object/networks/{objId}"

17. Question 17 of 25

    DRAG DROP - Drag and drop the code from the bottom onto the box where the code is missing to create a host object by using the Cisco Firepower Device Manager API. Not all options are used.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    Please look BASE_URL at question - https://ftd.example.com/api/fdm/latest/. Not /api/fmc_config/v1/ There are another device. So corect https://ftd.example.com/api/fdm/latest/object/networks' Example exact same https://www.cisco.com/c/en/us/td/docs/security/firepower/ftd-api/guide/ftd-rest-api/ftd-api-methods.html#task_14BAEBFFEB594B62968A3DF2B86F6FF5

    Adapted from community discussion by VincentVega · 2023-09-12 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation

    Answer figure

    

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. [

       [Removed]

       2023-01-18

       22 upvotes

       Answer is not correct. There's nothing called /object/hosts/ on a FDM, must be: /object/networks networkobject Bearer token POST

    2. K

       kirrim

       2023-10-17

       1 upvote

       There's a payload, so you know you're doing a POST. The payload has to be specifying this is a type networkobject since no other choice makes sense in that box, so this has to be the networks URL (you're adding a new network with the subType=HOST) https://www.cisco.com/c/en/us/td/docs/security/firepower/ftd-api/guide/ftd-rest-api/ftd-api-methods.html#task_14BAEBFFEB594B62968A3DF2B86F6FF5 https://developer.cisco.com/docs/ftd-api-reference/latest/#!models-networkobject/networkobject POSTs to the network URL do not require an ID appended to the end of the URL string (you're adding a new object so there is no ID yet) https://www.cisco.com/c/en/us/td/docs/security/firepower/660/api/REST/firepower_management_center_rest_api_quick_start_guide_660/Objects_In_The_REST_API.html#reference_ccb_k3f_bcb f'{BASE_URL}/object/networks' "networkobject" f'Bearer {token}' "POST"

    3. V

       VincentVega

       2023-09-12

       3 upvotes

       Please look BASE_URL at question - https://ftd.example.com/api/fdm/latest/. Not /api/fmc_config/v1/ There are another device. So corect https://ftd.example.com/api/fdm/latest/object/networks' Example exact same https://www.cisco.com/c/en/us/td/docs/security/firepower/ftd-api/guide/ftd-rest-api/ftd-api-methods.html#task_14BAEBFFEB594B62968A3DF2B86F6FF5

    4. X

       xChdjdufurpew

       2023-02-23

       1 upvote

       PUT hosts Request Type: PUT Description: Modifies a host object. URL: /api/fmc_config/v1/domain/{domain_UUID}/object/hosts/{object_UUID} URL to edit or update an override on a particular object: /api/fmc_config/v1/domain/{domain_UUID}/object/hosts/{parent_object_UUID} Permissions: Object Manager > Modify Object Manager POST hosts Request Type: POST Description: Creates or overrides the host objects with the specified parameters. URL: /api/fmc_config/v1/domain/{domain_UUID}/object/hosts URL for Bulk Post: /api/fmc_config/v1/domain/{domain_UUID}/object/hosts?bulk=true Permissions: Object Manager > Modify Object Manager

18. Question 18 of 25

    Select 2

    An engineer needs to automate the configuration on a Cisco NX-OS switch. The solution must meet these requirements: • Ansible is used. • The transport protocol is encrypted. • Support for Asynchronous requests. Which two access mechanisms must be used? (Choose two.)

    • AJSON-RPC
    • BNX-API
    • CHTTPS
    • DSNMP Version 2c
    • ENETCONF

    Show answer

    Correct answer: B, C

    How others answered

    • BC63%
    • BE38%

    Only 63% agreed on this answer — treat it as contested rather than settled.

    Explanation

    NX-API uses HTTP/HTTPS as its transport. CLIs are encoded into the HTTP/HTTPS POST body. Starting with Cisco NX-OS Release 9.2 (1), the NX-API feature is enabled by default on HTTPS port 443. HTTP port 80 is disabled. NX-API is also supported through UNIX Domain Sockets for applications running natively on the host or within Guest Shell. https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/102x/programmability/cisco-nexus-9000-series-nx-os-programmability-guide-release-102x/m-n9k-nx-api-cli-101x.html#:~:text=NX-API%20uses%20HTTP%2FHTTPS%20as%20its%20transport.%20CLIs%20are,natively%20on%20the%20host%20or%20within%20Guest%20Shell.

    Adapted from community discussion by whipmuffin · 2023-05-31 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. M

       MalonJay

       2023-04-20

       7 upvotes

       B E ansible can use netconf which uses ssh, SSH is also encrypted. Can you configure Nexus of https?

    2. [

       [Removed]

       2024-04-12

       Selected B, C1 upvote

       The correct answers are: B. NX-API and C. HTTPS Explanation: To meet the requirements of automating configurations on a Cisco NX-OS switch using Ansible, with encryption and support for asynchronous requests, the best options are: NX-API (B): NX-API (NXOS API) is Cisco's application programming interface for NX-OS based devices, which allows for commands to be sent to Cisco switches and responses to be received in a structured format such as JSON or XML. NX-API supports the use of HTTPS as its transport protocol, ensuring the encryption requirement is met. It also provides the capability to make calls and receive responses asynchronously. HTTPS (C): HTTPS is the secure version of HTTP, encrypting the data transmitted between the client and the server. Using HTTPS as the transport protocol for NX-API ensures that the communication is encrypted, addressing the security requirement specified in the scenario. HTTPS is commonly used with NX-API to secure the data in transit.

    3. W

       whipmuffin

       2023-05-31

       Selected B, C2 upvotes

       NX-API uses HTTP/HTTPS as its transport. CLIs are encoded into the HTTP/HTTPS POST body. Starting with Cisco NX-OS Release 9.2 (1), the NX-API feature is enabled by default on HTTPS port 443. HTTP port 80 is disabled. NX-API is also supported through UNIX Domain Sockets for applications running natively on the host or within Guest Shell. https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/102x/programmability/cisco-nexus-9000-series-nx-os-programmability-guide-release-102x/m-n9k-nx-api-cli-101x.html#:~:text=NX-API%20uses%20HTTP%2FHTTPS%20as%20its%20transport.%20CLIs%20are,natively%20on%20the%20host%20or%20within%20Guest%20Shell.

    4. D

       dkhenderson2

       2024-04-29

       1 upvote

       both NX-API and NETCONF support asynchronous requests, which meet the requirement for supporting asynchronous operations. In the case of NX-API, it provides support for asynchronous requests through the use of non-blocking APIs, which allow tasks to be executed concurrently without waiting for the completion of each individual task. This enables parallel execution of tasks, enhancing performance and efficiency. Similarly, NETCONF supports asynchronous operations through the use of notifications and subscriptions. Notifications allow the device to send asynchronous updates to the client about specific events or conditions, while subscriptions enable the client to receive ongoing updates about changes in device state. This asynchronous capability allows for efficient handling of events and notifications without blocking the execution of other tasks. Therefore, both NX-API and NETCONF meet the requirement for supporting asynchronous requests.

19. Question 19 of 25

    What is an advantage of using gRPC dial-in when using model-driven telemetry on a device?

    • Aautomatically recover in the event of a lost connection
    • Bno need to specify an explicit destination for data
    • Ctelemetry collector dials into the device to configure a gRPC stream
    • Dautomatically performs YANG model discovery

    Show answer

    Correct answer: B

    How others answered

    • B70%
    • A30%

    Only 70% agreed on this answer — treat it as contested rather than settled.

    Explanation

    B is correct Dial-In (dynamic): Telemetry updates are sent to the initiator subscriber A is not correct: it tries to re-establish/re-initiate and not recover the connection C is not correct: to configure a gRPC stream is dial-out D is not correct: this is NETCONF Source: https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/model-driven-telemetry-wp.html#DialinanddialoutMDT

    Adapted from community discussion by 3ca28d8 · 2024-10-19 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion3

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. 5

       5476afb

       2024-11-05

       Selected B3 upvotes

       Since the collector “dials-in” to the router, there’s no need to specify each MDT destination in the configuration. Just enable the gRPC service on the router, connect your client, and dynamically enable the telemetry subscription you want. https://xrdocs.io/telemetry/blogs/2017-01-20-model-driven-telemetry-dial-in-or-dial-out/

    2. 3

       3ca28d8

       2024-10-19

       Selected B2 upvotes

       B is correct Dial-In (dynamic): Telemetry updates are sent to the initiator subscriber A is not correct: it tries to re-establish/re-initiate and not recover the connection C is not correct: to configure a gRPC stream is dial-out D is not correct: this is NETCONF Source: https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/model-driven-telemetry-wp.html#DialinanddialoutMDT

    3. L

       luckymuki

       2024-12-05

       Selected B2 upvotes

       Agree with B. https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/710x/telemetry/configuration/guide/b-telemetry-cg-asr9000-710x/scale-up-your-network-monitoring-strategy-using-telemetry.html#id_117897:~:text=Dial%2DIn%20Mode-,In%20a%20dial%2Din%20mode,-%2C%20a%20collector%20dials

20. Question 20 of 25

    Select 2

    Which two methods are API security best practices? (Choose two.)

    • AUse tokens after the identity of a client has been established.
    • BUse the same operating system throughout the infrastructure.
    • CUse encryption and signatures to secure data.
    • DUse basic auth credentials over all internal API interactions.
    • EUse cloud hosting services to manage security configuration.

    Show answer

    Correct answer: A, C

    How others answered

    • AC100%

    Explanation

    Ans- A & C Here are some of the most common ways you can strengthen your API security: -Use tokens:== Establish trusted identities and then control access to services and resources by using tokens assigned to those identities. -Use encryption and signatures -Identify vulnerabilities -Use an API gateway https://www.redhat.com/en/topics/security/api-security https://www.examtopics.com/exams/cisco/350-901/view/6/#

    Adapted from community discussion by It1sme · 2022-10-19 · 13 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • redhat.com documentation
    • cisco.com documentation

    View community discussion3

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. I

       It1sme

       2022-10-19

       13 upvotes

       Ans- A & C Here are some of the most common ways you can strengthen your API security: -Use tokens:== Establish trusted identities and then control access to services and resources by using tokens assigned to those identities. -Use encryption and signatures -Identify vulnerabilities -Use an API gateway https://www.redhat.com/en/topics/security/api-security https://www.examtopics.com/exams/cisco/350-901/view/6/#

    2. E

       examtopicstroilevw

       2025-03-15

       Selected A, C1 upvote

       tokens and encryption actually provide some security. using the same OS throughout your infrastructure arguably makes you easier to compromise, because if you can compromise 1 host, you can compromise all of them. using basic auth is not advised because it is username and password, and passwords are not something you want to be pushing out there [the reason we use OAuth instead] no idea how using a cloud hosting service to manage security configuration makes you more secure, unless this is a sales/marketing exam from Azure, AWS, Google Cloud, OCI, etc.

    3. D

       designated

       2024-08-13

       Selected A, C2 upvotes

       A & C are correct Best practices recommended by Cisco 1. Vulnerability Identification 2. Encrypt Data 3. Authenticate all communication 4. Secure both internal and external API 5. Continuously monitor https://techblog.cisco.com/blog/api-security Redhat best practices are good as well.

21. Question 21 of 25

    Select 2

    The UCS Python SDK includes modules for Service Profile template creation. Which two UCS Service Profile template types are supported? (Choose two.)

    • Ainitial-template
    • Bupdating-template
    • Cabstract-template
    • Dattached-template
    • Ebase-template

    Show answer

    Correct answer: A, B

    How others answered

    • AB100%

    Explanation

    Agree with the answer being A and B. - Initial Template: The initial template is used to create a new server from a service profile with UIDs, but after the server is deployed, there is no linkage between the server and the template, so changes to the template will not propagate to the server, and all changes to items defined by the template must be made individually to each server deployed with the initial template. - Updating Template: An updating template maintains a link between the template and the deployed servers, and changes to the template (most likely to be firmware revisions) cascade to the servers deployed with that template on a schedule determined by the administrator. Some more reading about Service Profiles: https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/unified-computing/white_paper_590518.pdf

    Adapted from community discussion by architect_ · 2022-05-18 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. A

       architect_

       2022-05-18

       9 upvotes

       Agree with the answer being A and B. - Initial Template: The initial template is used to create a new server from a service profile with UIDs, but after the server is deployed, there is no linkage between the server and the template, so changes to the template will not propagate to the server, and all changes to items defined by the template must be made individually to each server deployed with the initial template. - Updating Template: An updating template maintains a link between the template and the deployed servers, and changes to the template (most likely to be firmware revisions) cascade to the servers deployed with that template on a schedule determined by the administrator. Some more reading about Service Profiles: https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/unified-computing/white_paper_590518.pdf

    2. D

       designated

       2023-08-17

       Selected A, B2 upvotes

       A and B are correct - Service profile templates enable you to quickly create several service profiles with the same basic parameters, such as the number of vNICs and vHBAs, and with identity information drawn from the same pools. There are two types of service profile templates: • Initial—Service profiles created from this template inherit all the properties of the template, but will not be updated when this template is updated. • Updating—Service profiles created from this template remain connected and will be updated when this template is updated.

    3. K

       kirrim

       2024-10-25

       Selected A, B1 upvote

       https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/gui/config/guide/141/UCSM_GUI_Configuration_Guide_141_chapter28.html#concept_C9D27CE2AA1245EA976DAA79F5BC6808 Initial template - Service profiles created from an initial template inherit all the properties of the template. However, after you create the profile, it is no longer connected to the template. If you need to make changes to one or more profiles created from this template, you must change each profile individually. Updating template - Service profiles created from an updating template inherit all the properties of the template and remain connected to the template. Any changes to the template automatically update the service profiles created from the template.

    4. C

       CertifiedGoogler

       2021-10-07

       3 upvotes

       I agree, 'A and B' are correct There are two types of service profile templates: •Initial •Updating https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-central/GUI-User-Guides/Server-Mgmt/1-5/b_CiscoUCSCentral_Server_Management_Guide_1-5/b_CiscoUCSCentral_Server_Management_Guide_1-5_chapter_0100.pdf

22. Question 22 of 25

    Select 2

    AppGigabitEthernet interface is used as data port for a container on a Cisco Catalyst 9000 Series Switch. Which two interface configuration options should be used? (Choose two.)

    • Atrunk interface
    • Bbridged virtual interface
    • CSPAN port
    • Dmanagement interface
    • Esubinterface

    Show answer

    Correct answer: A, C

    How others answered

    • AC100%

    Explanation

    A and C seem more accurate since SPAN Source Ports can be access or trunk ports. Definition: Containers can connect to AppGigabitEthernet in two modes: VLAN (where a single untagged VLAN is mapped to a container’s interface) and Trunk (where traffic for all the allowed VLANs is sent as Native or VLAN-tagged frames) Also, please see the white paper > https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c87-742415.html Although, there are two types of connectivity which are via Front Panel (Regular) L2 interfaces using trunk or VLAN (untagged vlan) or via L3 Routed interface using NAT and VirtualPortGroup. I think the question is asking only about the AppGigabitEthernet and this could be only configured as L2 interfaces in two modes (VLAN and Trunk) according to the WhitePaper and Cisco DEVCOR Study Guide.

    Adapted from community discussion by designated · 2023-02-18 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. J

       jinck

       2022-06-22

       4 upvotes

       Folks...The only 2 configuration options for an AppGigabitEthernet data port are: 'TRUNK' or 'VLAN' (comparable to 'trunk' or 'access' ports). The management interface is used by the switch to "manage" the docker container (eg. starting and operating a shell). This interface isn't running as a 'service interface' (such as "eth0") inside the docker container, it's bound to the whole container. You can see the 2 available configurations on page 84 of the original CiscoLive presentation of docker container configuration on a catalyst switch: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKCRS-2004.pdf

    2. D

       designated

       2023-02-18

       Selected A, C2 upvotes

       A and C seem more accurate since SPAN Source Ports can be access or trunk ports. Definition: Containers can connect to AppGigabitEthernet in two modes: VLAN (where a single untagged VLAN is mapped to a container’s interface) and Trunk (where traffic for all the allowed VLANs is sent as Native or VLAN-tagged frames) Also, please see the white paper > https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c87-742415.html Although, there are two types of connectivity which are via Front Panel (Regular) L2 interfaces using trunk or VLAN (untagged vlan) or via L3 Routed interface using NAT and VirtualPortGroup. I think the question is asking only about the AppGigabitEthernet and this could be only configured as L2 interfaces in two modes (VLAN and Trunk) according to the WhitePaper and Cisco DEVCOR Study Guide.

    3. F

       FR99

       2021-02-18

       4 upvotes

       "The AppGigabitEthernet interface can be configured as a trunk or VLAN specific interface. For a trunk interface, it is extended to work as a Layer 2 trunk port, and all traffic received by the port is available to the application. For a VLAN interface, the application is connected to a specific VLAN network by specifying the VLAN ID number"

    4. B

       Bloody_sausage

       2021-04-26

       4 upvotes

       You're all wrong. It's A and D. Look at the diagram on Cisco's website that lists Management Interface, front-panel VLAN and front-panel Trunk. Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/1612/b_1612_programmability_cg/application_hosting.html

23. Question 23 of 25

    Select 2

    Which two types of storage are supported for app hosting on a Cisco Catalyst 9000 Series Switch? (Choose two.)

    • Aexternal USB storage
    • Binternal SSD
    • CCD-ROM
    • DSD-card
    • Ebootflash

    Show answer

    Correct answer: A, B

    How others answered

    • AB100%

    Explanation

    From here https://www.cisco.com/c/dam/en/us/td/docs/security/cyber_vision/Cisco_Cyber_Vision_Network_Sensor_Installation_Guide_for_Cisco_IE3400_and_Catalyst_9300_3_1_1.pdf The SD Card is nly supported on the 3400 and for the 9300 it states a SSD to be plugged in. The questions asks on a 9000 series. On a 9400 the storage plugs into the supervisor card. https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9400-series-switches/nb-06-cat9400-ser-sup-eng-data-sheet-cte-en.pdf. on the 9500 it appears external https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9500-series-switches/nb-06-cat9500-ser-data-sheet-cte-en.html. On 9600 its on the supervisor https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9600-series-switches/nb-06-cat9600-series-data-sheet-cte-en.html. Appears those switches that are modular are on the supervisor card itself and those that are stackable are external SSD. Given that it appears A and B is correct.

    Adapted from community discussion by tommiy · 2023-09-15 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. T

       tommiy

       2023-09-15

       2 upvotes

       From here https://www.cisco.com/c/dam/en/us/td/docs/security/cyber_vision/Cisco_Cyber_Vision_Network_Sensor_Installation_Guide_for_Cisco_IE3400_and_Catalyst_9300_3_1_1.pdf The SD Card is nly supported on the 3400 and for the 9300 it states a SSD to be plugged in. The questions asks on a 9000 series. On a 9400 the storage plugs into the supervisor card. https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9400-series-switches/nb-06-cat9400-ser-sup-eng-data-sheet-cte-en.pdf. on the 9500 it appears external https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9500-series-switches/nb-06-cat9500-ser-data-sheet-cte-en.html. On 9600 its on the supervisor https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9600-series-switches/nb-06-cat9600-series-data-sheet-cte-en.html. Appears those switches that are modular are on the supervisor card itself and those that are stackable are external SSD. Given that it appears A and B is correct.

    2. B

       Bloody_sausage

       2022-10-26

       4 upvotes

       It's A and D. "Moreover, applications must reside in one of the external Solid State Drive (SSD) storage options (USB 3.0 or M2 SATA), depending on the specific Cisco Catalyst 9000 platforms.", so only EXTERNAL options are available and Cisco Catalyst 9300 has an SD-CARD slot that can be formatted as EXT4 too: https://www.cisco.com/c/dam/en/us/td/docs/security/cyber_vision/Cisco_Cyber_Vision_Network_Sensor_Installation_Guide_for_Cisco_IE3400_and_Catalyst_9300_3_1_1.pdf

    3. D

       designated

       2024-08-18

       Selected A, B1 upvote

       A and B are correct [..] applications must reside in one of the external Solid State Drive (SSD) storage options (USB 3.0 or M2 SATA), depending on the specific Cisco Catalyst 9000 platforms. Applications have no access to the internal device flash storage, which is reserved for Cisco IOS XE to protect its integrity. The M2 Sata can be internal or external SSD. https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c87-742415.html https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKARC-2035.pdf

    4. T

       Teringzooi

       2024-09-25

       Selected A, B2 upvotes

       Correct answers: A & B https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c87-742415.html https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKARC-2035.pdf

24. Question 24 of 25

    

    Refer to the exhibit. Which configuration of method and parameter retrieves the health of a laptop connected to the network from Cisco DNA Center?

    • APUT; network-health;
    • BGET; client-health;
    • CGET; network-device;
    • DPOST; network-device;

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    I agree 'B' is the correct answer. Get Overall Client Health GET /dna/intent/api/v1/client-health Returns Overall Client Health information by Client type (Wired and Wireless) for any given point of time https://developer.cisco.com/docs/dna-center/api/1-3-3-x/#!intent-api-v1-3-3-x

    Adapted from community discussion by CertifiedGoogler · 2022-10-08 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. W

       wunderup

       2022-05-24

       17 upvotes

       it should be B. Question asks the "health of a laptop" connected to the network, this laptop is a wired client device.

    2. C

       CertifiedGoogler

       2022-10-08

       4 upvotes

       I agree 'B' is the correct answer. Get Overall Client Health GET /dna/intent/api/v1/client-health Returns Overall Client Health information by Client type (Wired and Wireless) for any given point of time https://developer.cisco.com/docs/dna-center/api/1-3-3-x/#!intent-api-v1-3-3-x

    3. F

       ferock

       2024-04-26

       Selected B2 upvotes

       Client Health returns the information by client type (wired or wireless) but also it drills down to show details by category (poor, fair, good, idle, no data, and new).

    4. D

       designated

       2024-08-18

       Selected B2 upvotes

       B is correct > GET /dna/intent/api/v1/client-health https://developer.cisco.com/docs/dna-center/#!get-overall-client-health

25. Question 25 of 25

    An engineer must enable an SSID in a Meraki network. Which request accomplishes this task?

    • APUT /networks/{networkId}/ssids/{number}?enabled=true
    • BPOST /networks/{networkId}/ssids/{number}?enabled=true
    • CPUT /networks/{networkId}/ssids/{number} {"enable": true}
    • DPOST /networks/{networkId}/ssids/{number} {"enable": true}

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    Most probably wrongly written question. Correct way to enable SSID: PUT /networks/{networkId}/ssids/{number} Payload: { "enabled": true } I would wait exam to see if C answer is written in different way since sending body in the URL of request as A indicates is not correct.

    Adapted from community discussion by chulenzy · 2023-10-25 · 10 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-901 or CertExamHQ.

    1. C

       chulenzy

       2023-10-25

       10 upvotes

       Most probably wrongly written question. Correct way to enable SSID: PUT /networks/{networkId}/ssids/{number} Payload: { "enabled": true } I would wait exam to see if C answer is written in different way since sending body in the URL of request as A indicates is not correct.

    2. F

       ferock

       2024-04-27

       Selected C3 upvotes

       Source Cisco DEVCOR 350-901 Study Guide #Update SSID state update_req = do_API_call( api_url = f"networks/{my_network}/ssids/{my_ssid_nr}", action = "PUT", json = {"enabled": new_ssid_state}, )

    3. J

       jjkcoins

       2023-09-13

       4 upvotes

       Can't be C or D since they don't form a valid URL. A. PUT /networks/{networkId}/ssids/{number}?enabled=true

    4. H

       hiro555555

       2023-09-04

       4 upvotes

       C is correct. check the meraki api reference. https://developer.cisco.com/meraki/api/#!update-network-ssid

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-901 practice, question 1 of 25