350-901 practice questions 51–60

1. Question 51 · 385 in bank

   

   Refer to the exhibit. Pipenv is used to manage dependencies. The test runs successfully on a local environment. What is the reason for the error when running the test on a CI/CD pipeline?

   • AAll the unit tests in testsum.py failed.
   • BPytest did not detect any functions that start with 'test_'.
   • CThe pipfile in the local environment was not pushed to the remote repository.
   • DNose2 was not used as the test runner.

   Show answer

   Answer: C

   Explanation

   C is the correct answer. The error shows that unittest2 isn't installed which is a backport to Python 2.7. Pipenv can install it if the pipfile is shipped with it. https://realpython.com/pipenv-guide/

   Source: Adapted from community discussion — QuiShong

   Next question

2. Question 52 · 385 in bank

   Select 2

   What are two benefits of using a centralized logging service? (Choose two.)

   • Areduces the time required to query log data across multiple hosts
   • Breduces the loss of logs after a single disk failure
   • Cimproves application performance by reducing CPU usage
   • Dimproves application performance by reducing memory usage
   • Eprovides compression and layout of log data

   Show answer

   Answer: AE

   Explanation

   A and E seem the best answers here. A. reduces the time required to query log data across multiple hosts - it is better to search in a single place than multiple to find a root cause - Correct B. reduces the loss of logs after a single disk failure - It will reduce the data loss if the disk belongs to the application, but this could be a problem if the disk belongs to the centralized logging and how the logging has been deployed (multiples disks maybe?) - I'm not sure about this. C. improves application performance by reducing CPU usage - It will improve the CPU of the application, but the centralized logging will consume more CPU per application since we can specify that the log will be processed by the logging instead of being processed locally. In network devices, we can spread which logs will be processed locally and which ones will not. I'm not sure if this could be easily applied to the code as well. D. improves application performance by reducing memory usage - The same idea of CPU usage - I'm not either. E. provides compression and layout of log data - The compression could be done depending on the tools and storage that you will use. Also, a layout will be provided. - Correct

   Source: Adapted from community discussion — designated

   Next question

3. Question 53 · 385 in bank

   A team of developers created their own CA and started signing certificates for all of their IoT devices. Which action will make the browser accept these certificates?

   • AInstall a TLS instead of SSL certificate on the IoT devices.
   • BSet the private keys 1024-bit RSA.
   • CPreload the developer CA on the trusted CA list of the browser.
   • DEnable HTTPS or port 443 on the browser.

   Show answer

   Answer: C

   Explanation

   C is correct: To obtain and activate its identity certificate, the system’s (website) owner needs to enroll with the CA first. Here’s the process: - The resource’s RSA key pair (public and private) is generated. - A certificate signing request (CSR) containing identity information and the public key is delivered to a CA. Identity details can include data such as the system name, the organization to which the system belongs, and location information. - The CA validates the request. - The CA generates the system’s certificate, which contains these (or more) fields, as per the X.509 standard: - Serial Number, Subject, Public Key, Key Usage, Not Before and Not After, Issuer, Signature Algorithm, Signature. - The certificate is delivered back and installed on a system.

   Source: Adapted from community discussion — designated

   Next question

4. Question 54 · 385 in bank

   DRAG DROP - An engineer must access multiple bots that are running in an internal infrastructure. A different HTTPS URL is required for each bot. The infrastructure has just one public IP address and a Linux server with Apache installed. Drag and drop the actions from the left into the order of steps on the right to enable access to the bots inside. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   To allow access to multiple bots each with a unique HTTPS URL through a single public IP address using Apache, here’s the correct order of steps: Configure “Let’s Encrypt” on the Apache server. This step sets up HTTPS for secure access to the Apache server. Let's Encrypt will provide SSL certificates, allowing secure HTTPS connections. Configure Apache virtual hosts. Virtual hosts allow Apache to serve different applications or services on the same IP but with different URLs (or subdomains), each routing to a specific bot. Enable a reverse proxy in Apache. The reverse proxy in Apache will direct incoming requests to the appropriate bot server based on the URL or subdomain, allowing internal bots to be accessed from outside.

   Source: Adapted from community discussion — williamluo

   

   Next question

5. Question 55 · 385 in bank

   Select 2

   What are two benefits of using distributed log collectors? (Choose two.)

   • Asupports multiple transport protocols such as TCP/UDP
   • Bimproves performance and reduces resource consumption
   • Cprovides flexibility due to a wide range of plugins and accepted log formats
   • Denables extension of logs with fields and export to backend systems
   • Ebuffers and resends data when the network is unavailable

   Show answer

   Answer: BE

   Explanation

   The only option that in indisputably correct is B. Everything else depends so much on what is the actual environment and the configs in use on devices and log collectors.

   Source: Adapted from community discussion — __al__

   Next question

6. Question 56 · 385 in bank

   Select 2

   

   Refer to the exhibit. A company has extended networking from the data center to the cloud through Transit VPC. Which two statements describe the benefits of this approach? (Choose two.)

   • ADynamic routing combined with multi-AZ deployment creates a robust network infrastructure.
   • BVPC virtual gateways provide highly available connections to virtual networks.
   • CDedicated VPC simplifies load balancing by combining internal and external web services.
   • DVPC virtual gateways provide more secure connections to virtual networks.
   • EDedicated VPC simplifies routing by not combining this service with other shared services.

   Show answer

   Answer: AE

   Explanation

   Apologies for the wrong initial comment. The correct answers are A and E. I actually found where this question came from. It's a video from a cisco engineer and the 2 bullet points listed by the Cisco's presenter are the following: * Simplified routing by not combining with other shared services. * Dynamic routing combined with multi-AZ deployment creates a robust network infrastructure. PS: it also mentions that VPC virtual gateways provide highly available connections to transit VPC virtual network appliances, not "virtual networks" so B is incorrect. reference: https://www.youtube.com/watch?v=MPQLKyhN-rU (fast-forward to 1:15 min)

   Source: Adapted from community discussion — Bloody_sausage

   References

   • cisco.com documentation
   • Cisco documentation
   • AWS documentation

   Next question

7. Question 57 · 385 in bank

   A developer has just completed the configuration of an API that connects sensitive internal systems. Based on company policies, the security of the data is a high priority. Which approach must be taken to secure API keys and passwords?

   • AEmbed them directly in the code.
   • BStore them in a hidden file.
   • CStore them inside the source tree of the application.
   • DChange them periodically.

   Show answer

   Answer: D

   Explanation

   I go with "D. Change them periodically." "Do not embed API keys or signing secrets directly in code. Do not store API keys or signing secrets in files inside your application's source tree." https://developers.google.com/maps/api-key-best-practices

   Source: Adapted from community discussion — FR99

   References

   • Google developer documentation
   • cisco.com documentation

   Next question

8. Question 58 · 385 in bank

   Which statement about microservices architecture is true?

   • AApplications are written in a single unit.
   • BIt is a complex application composed of multiple independent parts.
   • CIt is often a challenge to scale individual parts.
   • DA single faulty service can bring the whole application down.

   Show answer

   Answer: B

   Explanation

   "B" Explanation: Microservices - also known as the microservice architecture - is an architectural style that structures an application as a collection of services that are. Highly maintainable and testable. Loosely coupled. Independently deployable. Organized around business capabilities.

   Source: Adapted from community discussion — blezzzo

   Next question

9. Question 59 · 385 in bank

   Select 2

   Which two principles are included in the codebase tenet of the 12-factor app methodology? (Choose two.)

   • AAn application is always tracked in a version control system.
   • BThere are multiple codebases per application.
   • CThe codebase is the same across all deploys.
   • DThere can be a many-to-one correlation between codebase and application.
   • EIt is only possible to have one application deployment per codebase.

   Show answer

   Answer: AC

   Explanation

   Factor I: Codebase One codebase tracked in revision control, many deploys. There should be exactly one codebase for a deployed service, with that codebase being used for many deployments. If there are multiple codebases, it’s not an app; it’s a distributed system. Then each component is an app, and each can individually comply with the 12-factor methodology. Multiple apps sharing the same code is a violation of the 12-factor methodology (do libraries instead). Source: Cisco DEVCOR 350-901 Study Guide

   Source: Adapted from community discussion — ferock

   Next question

10. Question 60 · 385 in bank

    What is submitted when an SSL certificate is requested?

    • APEM
    • BCRT
    • CDER
    • DCSR

    Show answer

    Answer: D

    Explanation

    D is correct: A certificate signing request (CSR) containing identity information and the public key is delivered to a CA. Identity details can include data such as the system name, the organization to which the system belongs, and location information.

    Source: Adapted from community discussion — designated

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-901 practice, question 51. 385 questions available.