Developing Applications using Cisco Core Platforms and APIs (DEVCOR)385 questions across 39 pages are complete and free, with no account or card.
385 questions in this bank
Free access · progress saved on this device
Refer to the exhibit. Which code snippet completes this code to handle API rate-limit?
Answer: D
D is correct because of the comment above the code. # If not rate-limited, exit loop and continue with the rest of the code if response.status_code !=429
Source: Adapted from community discussion — designated
Refer to the exhibit. Which parameter is missing from the JSON response to confirm the API version that is used?
Answer: C
It is C since there is no quotation mark in the field, so the field only can be filled using a number which is 2. The other answers are string type.
Source: Adapted from community discussion — designated
Which two methods are API security best practices? (Choose two.)
Answer: AC
Ans- A & C Here are some of the most common ways you can strengthen your API security: -Use tokens:== Establish trusted identities and then control access to services and resources by using tokens assigned to those identities. -Use encryption and signatures -Identify vulnerabilities -Use an API gateway https://www.redhat.com/en/topics/security/api-security https://www.examtopics.com/exams/cisco/350-901/view/6/#
Source: Adapted from community discussion — It1sme
DRAG DROP -
Refer to the exhibit. The Python script is supposed to make an API call to Cisco DNA Center querying a wireless profile for the `ChicagoCampus` and then parsing out its enable FlexConnect value. Drag and drop the parts of the Python code from the left onto the item numbers on the right that match the missing sections in the exhibit. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
import json file = open(WirelessProfile.json) profile = json.load(file) print(profile[0]['profileDetails']['ssidDetails'][0]['flexConnect']['enableFlexConnect']) Item 1 ====> ProfileName Item 2 ====> ProfileDetails Item 3 ====> ssidDetails Item 4 ====> 0 Item 5 ====> flexConnect Item 6 ====> enableFlexConne
Source: Adapted from community discussion — garcesdavid88
DRAG DROP - A developer is creating a Python script to catch errors using REST API calls and to aid in debugging. Drag and drop the code from the bottom onto the box where the code is missing to implement control flow for REST API errors. Not all options are used. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Suggest answer seems correct: In the event of a network problem (e.g. DNS failure, refused connection, etc), Requests will raise a ConnectionError exception. In the event of the rare invalid HTTP response, Requests will raise an HTTPError exception. If a request times out, a Timeout exception is raised. If a request exceeds the configured number of maximum redirections, a TooManyRedirects exception is raised. All exceptions that Requests explicitly raises inherit from requests.exceptions.RequestException. https://docs.python-requests.org/en/latest/user/quickstart/#errors-and-exceptions
Source: Adapted from community discussion — Johnno26
Which two encryption principles should be applied to secure APIs? (Choose two.)
Answer: BE
B and E are correct. B. Use encrypted connections to protect data in transit. (encrypt all requests and responses) E. Transmit authorization information by using digitally signed payloads. (signed certificates are more trustable than self-signed certificates) API Security Best Practices: - Implement authentication. - Implement authorization. - Validate all requests. - Encrypt all requests and responses. - Only include necessary information in responses. - Throttle API requests and establish quotas. - Log API activity. - Conduct security tests. https://blog.hubspot.com/website/api-security
Source: Adapted from community discussion — designated
DRAG DROP - Drag and drop the code from the bottom onto the box where the code is missing to provision a new Cisco Unified Computing System server by using the UCS XML API. Options may be used more than once. Not all options are used. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Refer to the exhibit. An application has been developed to serve the users in an enterprise. After HTTP cache controls are implemented in the application, users report that they receive stale data when they refresh the page. Without removing HTTP cache controls, which change ensures that the users get current data when refreshing the page?
Answer: D
D is correct. no-cache: The no-cache request directive asks caches to validate the response with the origin server before reuse. must-revalidate: The must-revalidate response directive indicates that the response can be stored in caches and can be reused while fresh. If the response becomes stale, it must be validated with the origin server before reuse. no-store: The no-store response directive indicates that any caches of any kind (private or shared) should not store this response. From --> https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
Source: Adapted from community discussion — RukiaTester
Which two situations are flagged by software tools designed for dependency checking in continuous integration environments, such as OWASP? (Choose two.)
Answer: AE
I agree with A and E: OWASP Dependency Check is a well known open-source tool which can track dependencies in your project and identify components with dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Source code analysis tools, also referred to as Static Application Security Testing (SAST) Tools, are designed to analyze source code and/or compiled versions of code to help find security flaws. Useful for things that such tools can automatically find with high confidence, such as buffer overflows, SQL Injection Flaws, and so forth
Source: Adapted from community discussion — blezzzo
DRAG DROP -
Refer to the exhibit. Drag and drop the correct parts of the Dockerfile from the left onto the item numbers on the right that match the missing sections in the exhibit to complete the Dockerfile to successfully build and deploy a container running a Python application. Not all parts of the Dockerfile are used. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Yeah, the correct answer is: FROM python:3.6-alpine COPY . . RUN pip install -r requirements.txt EXPOSE 5001 CMD ["python", "app.py"]
Source: Adapted from community discussion — designated
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-901 practice, question 321. 385 questions available.
Version 1.0.0. How we source questions
