350-901 practice questions 201–210

1. Question 201 · 385 in bank

   

   Refer to the exhibit. The code fetches the latest order from the purchases table for a specific user. An engineer needs to pass query parameters to the execute function to prevent an SQL injection attack. Which code snippet must be placed in the blank in the code to meet this requirement?

   • Acursor.execute("SELECT orders FROM purchases WHERE username = '{}'".format (username))
   • Bcursor.execute("SELECT orders FROM purchases WHERE username = %(username)s", {'username': username})
   • Ccursor.execute("SELECT orders FROM purchases WHERE username = '$s' % username".replace("'", "''"))
   • Dcursor.execute (f"SELECT orders FROM purchases WHERE username = '{username}'")

   Show answer

   Answer: B

   Explanation

   B is a parameterization method, better for SQL Injection; C is a ecaping method, better for XSS according to the DevCore study guide Moreover C has a syntax error Moreover ChatGPT sais B: This code is using Python to execute a SQL query against a database using parameterized queries to prevent SQL injection attacks. Specifically, it is selecting the orders column from the purchases table where the username column matches the username variable. The username variable is passed in as a parameter in a dictionary format using the % operator to substitute the value into the query string. This approach is recommended for preventing SQL injection attacks because it ensures that user input is treated as data rather than as part of the SQL statement itself.

   Source: Adapted from community discussion — ldlpi

   Next question

2. Question 202 · 385 in bank

   DRAG DROP - Drag and drop the code from the bottom onto the box where the code is missing in the Ansible script to get the existing firewall rules from Cisco Meraki and store the results to a new variable. Not all options are used.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The answer was in this page: https://docs.ansible.com/ansible/latest/scenario_guides/guide_meraki.html This is a result: - name: Get firewall rules meraki_mx_l3_firewall: auth_key: KEY123 org_name: example_org net_name: example_net state: query delegate_to: localhost register: rules - set_fact: original_ruleset: '{{rules.data}}'

   Source: Adapted from community discussion — cj_kuo

   

   Next question

3. Question 203 · 385 in bank

   What is a benefit of using model-driven telemetry?

   • Areduces the load on the server by enabling the client to pull data
   • Bsimplifies the development of clients by using a single encoding standard for the data
   • Cenables operational data to be collected at higher rates and a higher scale
   • Denables the application to pull data faster than pushing the data

   Show answer

   Answer: C

   Explanation

   I asked ChatGPT and it answered C. How confident are you in your answer? I am highly confident in my answer, Model-driven telemetry is a feature that allows devices to collect operational data at a high rate and scale. This is achieved by using a standard data model, which defines the data that should be collected, and a standard encoding format, which defines how the data should be encoded and sent to the collector. The standard data model and encoding format allow devices to send data in a consistent format, which makes it easier to process and analyze the data.

   Source: Adapted from community discussion — [Removed]

   Next question

4. Question 204 · 385 in bank

   

   Refer to the exhibit. A network engineer must integrate error handling for time-outs on network devices using the REST interface. Which line of code needs to be placed on the snippet where the code is missing to accomplish this task?

   • Aelif resp.status_code == 429 or self._retries < self._MAX_RETRIES:
   • Belif resp.status_code == 404 and self._retries < self._MAX_RETRIES:
   • Celif resp.status_code == 404 or self._retries < self._MAX_RETRIES:
   • Delif resp.status_code == 429 and self._retries < self._MAX_RETRIES:

   Show answer

   Answer: D

   Next question

5. Question 205 · 385 in bank

   Select 2

   Which two types of organization are subject to GDPR? (Choose two.)

   • Aonly organizations that operate outside the EU
   • Bany organization that offers goods or services to customers in the EU
   • Conly organizations that have offices in countries that are part of the EU
   • Dany organization that operates within the EU
   • Eonly organizations that physically reside in the EU

   Show answer

   Answer: BD

   Explanation

   Reference: https://www.cisco.com/c/en/us/products/security/comply-with-GDPR.html

   Next question

6. Question 206 · 385 in bank

   DRAG DROP - A developer is creating a Python script to use the Webex REST API to list joined spaces and handle and print the errors it receives. Drag and drop the code from the bottom onto the box where the code is missing to complete the script. Not all options are used.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   should be: bearer (as it is referenced a few lines later so it has to be declared first) authorization response server error

   Source: Adapted from community discussion — Calyfas

   

   Next question

7. Question 207 · 385 in bank

   DRAG DROP - Drag and drop the steps from the left into the order on the right to build and run a customized Python Docker image. Not all options are used.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

8. Question 208 · 385 in bank

   DRAG DROP - A developer is designing an application that uses confidential information for a company and its clients. The developer must implement different secret storage techniques for each handled secret to enforce security policy compliance within a project. Drag and drop the security policy requirements from the left onto the storage solutions on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   SecretA must be accessible only to the application => Source code file encrypted SecretB, which has access control, must be implemented in a secure, per-user fashion => External password manager The development team must have unlimited access to SecretC => Source code file in plain text SecretD must be accessible to anyone who has host access => Environmental variable file

   Source: Adapted from community discussion — johntermlen

   

   Next question

9. Question 209 · 385 in bank

   A team is developing a cloud-native application for network monitoring and management of various devices. An increased growth rate of users is expected. The solution must be easily managed and meet these requirements: • able to use dependencies • easy disposability • flexible configuration Which application design approach must be used?

   • A12-factor app framework
   • Bobject-oriented programming
   • Cagile software development
   • Dwaterfall model

   Show answer

   Answer: A

   Next question

10. Question 210 · 385 in bank

    An application is made up of multiple microservices, each communicating via APIs. One service is beginning to be a bottleneck for the application because it can take a lot of time to complete requests. An engineer tried adding additional instances of this service behind the load balancer, but it did not have any effect. Which application design change must be implemented in this scenario?

    • ADeploy an API gateway to centralize all inbound communication requests and offload authentication.
    • BVendor all dependencies into the service that is causing delays to remove external dependency checks.
    • CMove from synchronous to asynchronous interactions with the service and implement a message queue.
    • DLeverage serverless architecture instead of containers to gain the advantage of event driven APIs.

    Show answer

    Answer: C

    Explanation

    I agree that the best answer is **C. Move from synchronous to asynchronous interactions with the service and implement a message queue**¹²³⁴⁵. This is because synchronous communication creates a **chain** of requests between microservices that can cause **delays** and **bottlenecks**¹²⁴. Asynchronous communication allows microservices to use **messages** or **polling** to communicate with other microservices without waiting for a response¹²³⁴. A message queue is a mechanism that enables asynchronous communication by storing and delivering messages between microservices³⁵. This can improve the **performance**, **scalability**, and **resilience** of the application¹²⁵.

    Source: Adapted from community discussion — whipmuffin

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-901 practice, question 201. 385 questions available.