350-901 practice questions 31–40

1. Question 31 · 385 in bank

   A Cisco Catalyst 9000 switch has guest shell enabled. Which Linux command installs a third-party application?

   • Aapt-get install <package-name>
   • Bzypper install <package-name>
   • Cyum install <package-name>
   • Ddnf install <package-name>

   Show answer

   Answer: C

   Explanation

   Correct answer: C You can install other Python libraries such as, Python Version 3.0 during runtime using the Yum utility in CentOS 8.0. You can also install or update python packages using PIP. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/171/b_171_programmability_cg/guest_shell.html#id_45860

   Source: Adapted from community discussion — Teringzooi

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 32 · 385 in bank

   DRAG DROP - Drag and drop the code from the bottom onto the box where the code is missing to create a new Cisco Webex space and attach a previously configured bot named 'sampleBot'. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

3. Question 33 · 385 in bank

   There is a requirement to securely store unique usernames and passwords. Given a valid username, it is also required to validate that the password provided is correct. Which action accomplishes this task?

   • AEncrypt the username, hash the password, and store these values.
   • BHash the username, hash the password, and store these values.
   • CEncrypt the username, encrypt the password, and store these values.
   • DHash the username, encrypt the password, and store these values.

   Show answer

   Answer: A

   Explanation

   A is correct. Because username must be unique: Fact #1: If you hash the username, it'll become irreversible. Fact #2: It is possible for two different string to produce the same hash. Which means when you hash the username, you cannot be 100% sure it's unique anymore. With encryption however you'll be able to reverse the username stored in db, and compare it with the username. https://learn.microsoft.com/en-us/dotnet/api/system.string.gethashcode?view=net-6.0#definition

   Source: Adapted from community discussion — NetGirl

   References

   • Microsoft Learn

   Next question

4. Question 34 · 385 in bank

   While developing an application following the 12-factor app methodology, which approach should be used in the application for logging?

   • AWrite a log to a file in the application directory.
   • BWrite a log to a file in /var/log.
   • CWrite the logs buffered to stdout.
   • DWrite the logs unbuffered to stdout.

   Show answer

   Answer: D

   Explanation

   D is correct. ## Factor XI: Logs ## Treat logs as event streams. Logs have no fixed beginning or end but flow continuously as long as the app is operating. A 12-factor app never concerns itself with routing or storage of its output stream. It should not attempt to write to or manage log files. Instead, each running process writes its event stream, unbuffered, to stdout.

   Source: Adapted from community discussion — designated

   Next question

5. Question 35 · 385 in bank

   Select 2

   An application has initiated an OAuth authorization code grant flow to get access to an API resource on behalf of an end user. Which two parameters are specified in the HTTP request coming back to the application as the end user grants access? (Choose two.)

   • Aaccess token and a refresh token with respective expiration times to access the API resource
   • Baccess token and expiration time to access the API resource
   • Credirect URI a panel that shows the list of permissions to grant
   • Dcode that can be exchanged for an access token
   • Estate can be used for correlation and security checks

   Show answer

   Answer: DE

   Explanation

   Answer is 'D & E' D. code that can be exchanged for an access token E. state can be used for correlation and security checks "If the user approves the request, the authorization server will redirect the browser back to the redirect_uri specified by the application, adding a code and state to the query string." https://developer.okta.com/blog/2018/04/10/oauth-authorization-code-grant-type "Assuming the resource owner grants access, the authorization server redirects the user-agent back to the client using the redirection URI provided earlier (in the request or during client registration). The redirection URI includes an authorization code and any local state provided by the client earlier." https://tools.ietf.org/html/rfc6749

   Source: Adapted from community discussion — FR99

   Next question

6. Question 36 · 385 in bank

   Select 2

   A web application is susceptible to cross-site scripting. Which two methods allow this issue to be mitigated? (Choose two.)

   • AUse only drop downs.
   • BLimit user input to acceptable characters.
   • CEncrypt user input on the client side.
   • DUse AES encryption to secure the script.
   • ERemove all HTML/XML tags from user input.

   Show answer

   Answer: BE

   Explanation

   I agree with PopLife: B. Limit user input to acceptable characters. This might be related to the concept of XSS Filters/Sanitization, in which you take the untrusted user input and strip out anything that is not permitted. E. Remove all HTML/XML tags from user input. It might related to the concept XSS Escaping. Like HTML, CSS, XML, Javascripts Escaping. https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html

   Source: Adapted from community discussion — B3nd3cida

   Next question

7. Question 37 · 385 in bank

   Why is end-to-end encryption deployed when exposing sensitive data through APIs?

   • AData transfers are untraceable from source to destination.
   • BData cannot be read or modified other than by the true source and destination.
   • CServer-side encryption enables the destination to control data protection.
   • DTraffic is encrypted and decrypted at every hop in the network path.

   Show answer

   Answer: B

   Explanation

   End-to-end encryption (E2EE) is a method of secure communication where only the communicating end users can access the data, while any third-party is prevented from accessing it while it’s transferred from one end system to another. In E2EE, the data is encrypted on the sender’s system or device and only the recipient is able to decrypt it. Nobody in between, be they an Internet service provider, application service provider, or hacker, can read it or tamper with it because encryption keys are known only to the communicating parties. Source:Cisco DEVCOR 350-901 Study Guide

   Source: Adapted from community discussion — ferock

   Next question

8. Question 38 · 385 in bank

   Where should distributed load balancing occur in a horizontally scalable architecture?

   • Afirewall-side/policy load balancing
   • Bnetwork-side/central load balancing
   • Cservice-side/remote load balancing
   • Dclient-side/local load balancing

   Show answer

   Answer: D

   Explanation

   D is correct. > The front-end/back-end model/concept is widely used in web development. The front end (also called the “client side”) is everything a user sees and interacts with in a browser. The back end (also called the “server side”) of a website processes and stores data and ensures everything on the client side works correctly. To further reduce latency, modern web architectures use client-side processes and move away from doing everything on a server side. With this model, the server provides a “raw” code that implements some application logic and renders a web page into its final form locally within a browser. It allows the creation of dynamic web pages, where the view changes based on user input and events (for example, hovering a mouse over a thumbnail brings up a full-sized image) without any interaction with a server, resulting in a much better user experience. > The load balance could be done by using local ADC (Application Delivery Controllers) or geographically by using GSLB (Global Server Load Balancer) with DNS queries or CDN caches.

   Source: Adapted from community discussion — designated

   Next question

9. Question 39 · 385 in bank

   A developer deploys a SQLite database in a Docker container. Single-use secret keys are generated each time a user accesses the database. The keys expire after 24 hours. Where should the keys be stored?

   • AOutside of the Docker container in the source code of applications that connect to the SQLite database.
   • BIn a separate file inside the Docker container that runs the SQLite database.
   • CIn an encrypted database table within the SQLite database.
   • DIn a separate storage volume within the Docker container.

   Show answer

   Answer: D

   Explanation

   to be honest, C is a less terrible option. To be even more honest, the whole design proposed by the question is shit and, hence, all options are shit as well.

   Source: Adapted from community discussion — __al__

   Next question

10. Question 40 · 385 in bank

    While working with the Webex API, on an application that uses end-to-end encryption, a webhook has been received. What must be considered to read the message?

    • AWebhook information cannot be used to read the message because of end-to-end encryption. The API key is needed to decrypt the message.
    • BWebhook returns the full unencrypted message. Only the body is needed to query the API.
    • CWebhook returns a hashed version of the message that must be unhashed with the API key.
    • DWebhook returns message identification. To query, the API is needed for that message to get the decrypted information.

    Show answer

    Answer: D

    Explanation

    I believe it should be D. The Webhook does not contain the text itself. You need to perform a GET request to /messages/{id} to get the text.

    Source: Adapted from community discussion — tswinn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-901 practice, question 31. 385 questions available.