350-901 practice questions 281–290

1. Question 281 · 385 in bank

   How should end-to-end encryption of API communications be applied between the microservices containers of the application in a Kubernetes environment?

   • ASet up the network policy on the deployment.
   • BModify the application code to instrument encryption of the API communication endpoints.
   • CEnsure that container pods are deployed with non-root privileges to enforce encryption.
   • DDeploy Istio service mesh and enable mutual TLS for all the container pods.

   Show answer

   Answer: D

   Explanation

   D. Deploy Istio service mesh and enable mutual TLS for all the container pods. Istio is a service mesh that provides traffic management, policy enforcement, and telemetry collection. One of Istio's key features is the ability to automatically enable mutual TLS for microservices communication, providing secure service-to-service communication in a cluster, including end-to-end encryption, strong identity-based authentication, and authorization. While the other options may be part of a comprehensive security strategy, they do not directly address the requirement of end-to-end encryption of API communications between microservices in a Kubernetes environment.

   Source: Adapted from community discussion — 1a63556

   Next question

2. Question 282 · 385 in bank

   A development team is considering options for implementing a new configuration management solution which must: • be agentless • utilize Python as a developing language • leverage YAML based workflows Which solution must be chosen?

   • ATerraform
   • BPuppet
   • CAnsible
   • DNornir

   Show answer

   Answer: C

   Explanation

   Why not Nornir: Nornir is a Python library for managing network devices, not a complete configuration management solution. It wouldn't offer the full feature set needed by the development team.

   Source: Adapted from community discussion — luckymuki

   Next question

3. Question 283 · 385 in bank

   What is an advantage of using gRPC dial-in when using model-driven telemetry on a device?

   • Aautomatically recover in the event of a lost connection
   • Bno need to specify an explicit destination for data
   • Ctelemetry collector dials into the device to configure a gRPC stream
   • Dautomatically performs YANG model discovery

   Show answer

   Answer: B

   Explanation

   B is correct Dial-In (dynamic): Telemetry updates are sent to the initiator subscriber A is not correct: it tries to re-establish/re-initiate and not recover the connection C is not correct: to configure a gRPC stream is dial-out D is not correct: this is NETCONF Source: https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/model-driven-telemetry-wp.html#DialinanddialoutMDT

   Source: Adapted from community discussion — 3ca28d8

   References

   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 284 · 385 in bank

   A developer checks out a branch named feat23 from a Git repository. The developer receives this error after attempting to switch to a branch named feat89: Error: You have local changes to 'feat23'; not switching branches. Which command switches to branch feat89?

   • Agit checkout -r feat89
   • Bgit mv feat89
   • Cgit checkout -m feat89
   • Dgit merge feat89

   Show answer

   Answer: C

   Explanation

   C. git checkout -m feat89 The error message indicates that there are uncommitted changes in the current branch (feat23). Normally, Git prevents switching branches in this situation to avoid potential conflicts. To force Git to switch to another branch despite the uncommitted changes, the developer can use the -m or --merge option with the git checkout command. This tries to perform a three-way merge between the current changes, the changes in the branch that is being checked out (feat89), and the common ancestor of the two. So, git checkout -m feat89 should allow the developer to switch to the feat89 branch.

   Source: Adapted from community discussion — 1a63556

   Next question

5. Question 285 · 385 in bank

   A developer has completed the implementation of a REST API, but when it is executed, it returns a 401 error message. What must be done on the API to resolve the issue?

   • AAccess permission to the resource must be granted, before the request.
   • BConfigure new valid credentials.
   • CThe requested API endpoint does not exist, and the request URL must be changed.
   • DAdditional permission must be granted before the request can submitted.

   Show answer

   Answer: B

   Explanation

   Answer is B. 401 is "unauthorized": authentication incorrect or missing A & D are for 403 "Forbidden" C is for 404 "Not found"

   Source: Adapted from community discussion — TechBrain

   Next question

6. Question 286 · 385 in bank

   Select 2

   Which two statements are considered best practices according to the 12-factor app methodology for application design? (Choose two.)

   • AApplication code writes its event stream to stdout.
   • BApplication log streams are archived in multiple replicated databases.
   • CApplication log streams are sent to log indexing and analysis systems.
   • DApplication code writes its event stream to specific log files.
   • ELog files are aggregated into a single file on individual nodes.

   Show answer

   Answer: AC

   Explanation

   A and C are correct. ## Factor XI: Logs ## Treat logs as event streams. Logs have no fixed beginning or end but flow continuously as long as the app is operating. A 12-factor app never concerns itself with routing or storage of its output stream. It should not attempt to write to or manage log files. Instead, each running process writes its event stream, unbuffered, to stdout. In staging and production deploys, each process’s stream will be captured by the execution environment, collated together with all other streams from the app, and routed to one or more final destinations for viewing and long-term archival. These archival destinations are not visible to or configurable by the app.

   Source: Adapted from community discussion — designated

   Next question

7. Question 287 · 385 in bank

   

   Refer to the exhibit. Many faults have occurred in the ACI environment and a sample of them needs to be examined. Which API call retrieves faults 31 through 45?

   • AGET https://apic-ip-address/api/class/faultInfo.json\?order-by=faultInst.severity|desc&page=1&page-size=15
   • BGET https://apic-ip-address/api/class/faultInfo.json\?order-by=faultInst.severity|desc&page=2&page-size=15
   • CGET https://apic-ip-address/api/class/faultInfo.json\?order-by=faultInst.severity|desc&page-size=30
   • DGET https://apic-ip-address/api/class/faultInfo.json\?order-by=faultInst.severity|desc&page=2&page-size=30

   Show answer

   Answer: B

   Next question

8. Question 288 · 385 in bank

   

   Refer to the exhibit. The cURL POST request creates an OAuth access token for authentication with FDM API requests. What is the purpose of the file `@token_data` that cURL is handling?

   • AThis file is a container to log possible error responses in the request.
   • BThis file is given as input to store the access token received from FDM.
   • CThis file is used to send authentication-related headers.
   • DThis file contains raw data that is needed for token authentication.

   Show answer

   Answer: D

   Explanation

   D is correct # curl --help all -d, --data-raw HTTP POST data, '@' allowed Note: To post data in the body of a request message using Curl, you need to pass the data to Curl using the -d or --data command line switch. https://reqbin.com/req/c-d2nzjn3z/curl-post-body

   Source: Adapted from community discussion — designated

   Next question

9. Question 289 · 385 in bank

   DRAG DROP - Drag and drop the expressions from below onto the code to implement error handling. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   - The body of if is executed only if this evaluates to create the route or if the status is equal to 201 if = status == 201 (HTTP 201 is CREATED) = correct - So, if the route is I52not be created, the body of else is executed else: = correct Note: if-else statement evaluates the Boolean expression. If the condition is TRUE then, the code present in the “ if “ block will be executed otherwise the code of the “else“ block will be executed Wrong if response == 601 = there is no 6xx HTTP code elif is used to include multiple conditional (and it is not this case) when is used to run a block of code whenever, during the execution of the program, a condition is met or related to an event (and it is not this case)

   Source: Adapted from community discussion — designated

   

   Next question

10. Question 290 · 385 in bank

    User report that they can no longer able to process transactions with the online ordering application, and the logging dashboard is displaying these messages. Fri Jan 10 19:37:31.123 EST 2020 [FRONTEND] INFO: Incoming request to add item to cart from user 45834534858 Fri Jan 10 19:37:31.247 EST 2020 [BACKEND] INFO: Attempting to add item to cart Fri Jan 10 19:37:31.250 EST 2020 [BACKEND] ERROR: Failed to add item: MYSQLDB ERROR: Connection refused What is causing the problem seen in these log messages?

    • AThe database server container has crashed.
    • BThe backend process is overwhelmed with too many transactions.
    • CThe backend is not authorized to commit to the database.
    • DThe user is not authorized to add the item to their cart.

    Show answer

    Answer: C

    Explanation

    A The message 'Connection Refused' has two main causes: Nothing is listening on the IP:Port you are trying to connect to. The port is blocked by a firewall. Source - https://serverfault.com/questions/725262/what-causes-the-connection-refused-message

    Source: Adapted from community discussion — romanknet

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-901 practice, question 281. 385 questions available.