Developing Applications using Cisco Core Platforms and APIs (DEVCOR)385 questions across 39 pages are complete and free, with no account or card.
385 questions in this bank
Free access · progress saved on this device
When end-to-end encryption is implemented, which area is most vulnerable to exploitation?
Answer: B
B is correct "Endpoint security - E2EE only encrypts data between the endpoints. This fact means the endpoints themselves are vulnerable to attack. Therefore, enterprises implement endpoint security to protect data beyond in-transit. " https://www.ibm.com/topics/end-to-end-encryption
Source: Adapted from community discussion — designated
How do end-to-end encryption principles apply to APIs?
Answer: C
What is a data privacy concern when designing data storage?
Answer: A
Should be A. Data must be kept for as long as necessary. - data privacy requirement according to Study Guide GDPR Princile about Storage Limitation.
Source: Adapted from community discussion — hartak
A web application is being developed to provide online sales to a retailer. The customers will need to use their username and passwords to login into their profile and complete their order. For this reason, the application must store user passwords. Which approach ensures that an attacker will need to crack the passwords one at a time?
Answer: B
What is Salting? Salting is a concept that typically pertains to password hashing. Essentially, it’s a unique value that can be added to the end of the password to create a different hash value. This adds a layer of security to the hashing process, specifically against brute force attacks. A brute force attack is where a computer or botnet attempt every possible combination of letters and numbers until the password is found. Anyway, when salting, the additional value is referred to as a “salt.” The idea is that by adding a salt to the end of a password and then hashing it, you’ve essentially complicated the password cracking process. https://www.thesslstore.com/blog/difference-encryption-hashing-salting/
Source: Adapted from community discussion — ferock
DRAG DROP - An engineer is developing a web-based application that will be used as a central repository for the HR department. The application needs to authenticate user access and encrypt communication. Drag and drop the steps from the left into the order on the right to install an application-specific SSL certificate. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Correct answer: 1. Create a certificate signing request (CSR) 2. Acquire the SSL certificate 3. Install the SSL certificate 4. Configure the application to use HTTPS
Source: Adapted from community discussion — Teringzooi
FILL BLANK - A local Docker image has an image ID of 385001111. Fill in the blanks to complete the command in order to tag the image into the "cisco" repository with "version1.0"
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer:
Reference: https://docs.docker.com/engine/reference/commandline/tag/
Source: Adapted from community discussion — lente_kriebels
Refer to the exhibit. What is the missing step in deploying a Docker container to IOx?
Answer: A
"A" is the correct answer. see: https://www.cisco.com/c/en/us/support/docs/routers/1101-industrial-integrated-services-router/214383-build-and-deploy-a-docker-iox-package-fo.html "The container is ready to be packaged. Before you can ask ioxclient to do this, you first need to create the package descriptor: package.yaml."
Source: Adapted from community discussion — [Removed]
Refer to the exhibit. The command docker build --tag=friendlyhello . is run to build a docker image from the given Dockerfile, reguirements.txt, and app.py. Then the command docker run -p 4000:80 friendlyhello is executed to run the application. Which URL is entered in the web browser to see the content served by the application?
Answer: C
Which two statements about a stateless application are true? (Choose two.)
Answer: AB
What is an effective logging strategy according to the 12-factor app tenets?
Answer: D
Factor XI: Logs Treat logs as event streams. Logs have no fixed beginning or end but flow continuously as long as the app is operating. A 12-factor app never concerns itself with routing or storage of its output stream. It should not attempt to write to or manage log files. Instead, each running process writes its event stream, unbuffered, to stdout. In staging and production deploys, each process’s stream will be captured by the execution environment, collated together with all other streams from the app, and routed to one or more final destinations for viewing and long-term archival. These archival destinations are not visible to or configurable by the app. Source: Cisco DEVCOR 350-901 Study Guide
Source: Adapted from community discussion — ferock
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-901 practice, question 41. 385 questions available.
Version 1.0.0. How we source questions