350-901 practice questions 71–80

1. Question 71 · 385 in bank

   The response from a server includes the header ETag: W/`7eb8b94419e371767916ef13e0d6e63d`. Which statement is true?

   • AThe ETag has a Strong validator directive.
   • BThe ETag has a Weak validator directive, which is an optional directive.
   • CThe ETag has a Weak validator directive, which is a mandatory directive.
   • DThe ETag has a Strong validator directive, which it is incorrectly formatted.

   Show answer

   Answer: B

   Explanation

   I agree with FR99: B is the right choice here. Explanation: The ETag HTTP response header is an identifier for a specific version of a resource. It lets caches be more efficient and save bandwidth, as a web server does not need to resend a full response if the content has not changed. Additionally, etags help prevent simultaneous updates of a resource from overwriting each other Syntax: ETag: W/" " Directives:  W/ ( Optional) 'W/' (case-sensitive) indicates that a weak validator is used. Weak etags are easy to generate, but are far less useful for comparisons.  " " Entity tag uniquely representing the requested resource. They are a string of ASCII characters placed between double quotes, like "675af34563dc-tr34"

   Source: Adapted from community discussion — blezzzo

   Next question

2. Question 72 · 385 in bank

   Which HTTP status code indicates that a client application is experiencing intentional rate limiting by the server?

   • A202
   • B401
   • C429
   • D503

   Show answer

   Answer: C

   Next question

3. Question 73 · 385 in bank

   

   Refer to the exhibit. A Docker swarm cluster is configured to load balance services across data centers in three different geographical regions: west, central, and east. The cluster has three manager nodes and three worker nodes. A new service named cisco_devnet is being deployed. The service has these design requirements: ✑ All containers must be hosted only on nodes in the central region. ✑ The service must run only on nodes that are ineligible for the manager role. Which approach fulfills the requirements?

   • AUse placement constraints to control nodes to which the service can be assigned.
   • BCreate the service manually in the central region and set replicas to 0.
   • CEnable the control flag in the containers of the west and east regions to prevent the service from starting.
   • DCreate a second swarm cluster that is hosted only in the central region.

   Show answer

   Answer: A

   Explanation

   Answer A seems to be correct. Placement preferences let you apply an arbitrary label with a range of values to each node, and spread your service’s tasks across those nodes using an algorithm. Currently, the only supported algorithm is spread, which tries to place them evenly. For instance, if you label each node with a label rack which has a value from 1-10, then specify a placement preference keyed on rack, then service tasks are placed as evenly as possible across all nodes with the label rack, after taking other placement constraints, placement preferences, and other node-specific limitations into account. https://docs.docker.com/engine/swarm/services/#control-service-placement

   Source: Adapted from community discussion — Teringzooi

   Next question

4. Question 74 · 385 in bank

   An engineer is developing a Docker container for an application in Python. For security reasons the application needs to be accessible on port 5001 only. Which line should be added to the dockerfile in order to accomplish this?

   • AADD PORT 5001
   • BENTRYPOINT 5001
   • CEXPOSE 5001
   • DPORT SRC 5001

   Show answer

   Answer: C

   Next question

5. Question 75 · 385 in bank

   Select 2

   

   Refer to the exhibit. The cisco_devnet Docker swarm service runs across five replicas. The development team tags and imports a new image named devnet/ test:1.1 and requests that the image be upgraded on each container. There must be no service outages during the upgrade process. Which two design approaches must be used? (Choose two.)

   • AEnable parallel upgrades by using the docker service update command.
   • BEnsure that the service is hosted behind a VIP with no session persistence.
   • CEnsure that the service replicas are set to a minimum of 5.
   • DUpdate the restart policy of the containers to restart upon failure.
   • EImplement rolling upgrades by using the docker service update command.

   Show answer

   Answer: BE

   Explanation

   B and E are correct VIP will direct the requests to the up-and-running containers while rolling upgrades will perform one upgrade at a time: Stop the first task. Schedule update for the stopped task. Start the container for the updated task. If the update to a task returns RUNNING, wait for the specified delay period then start the next task. If, at any time during the update, a task returns FAILED, pause the update. https://docs.docker.com/engine/swarm/swarm-tutorial/rolling-update/

   Source: Adapted from community discussion — designated

   Next question

6. Question 76 · 385 in bank

   

   Refer to the exhibit. An attempt to execute a CI/CD pipeline results in the error shown. What is the cause of the error?

   • AThe unit tests failed to complete.
   • BThe VCS repository is unavailable.
   • CThe remote library repository is unavailable.
   • DThe built artifacts failed to publish to the target server.

   Show answer

   Answer: B

   Explanation

   Correct answer: B The standard error (stderr) is showing 502 (unable to access <>.git) repository = VCS. HTTP 502 = This error response means that the server, while working as a gateway to get a response needed to handle the request, got an invalid response.

   Source: Adapted from community discussion — Teringzooi

   Next question

7. Question 77 · 385 in bank

   

   Refer to the exhibit. Which action should be performed to avoid an SQL injection attack?

   • AValidate the input on the platform variable.
   • BDevelop a denial of service response plan.
   • CEncrypt the password that is used to connect to the database.
   • DCompile the Python file instead of allowing live interpretation.

   Show answer

   Answer: A

   Explanation

   Correct answer: A Defense Method: - Input validation/sanitization in the form of blacklisting (where certain characters are not accepted) or whitelisting (where only certain characters are approved). Whitelisting is more effective, as complex obfuscation technologies may allow attackers to bypass blacklisting.

   Source: Adapted from community discussion — Teringzooi

   Next question

8. Question 78 · 385 in bank

   Select 2

   Which two data encoding techniques are supported by gRPC? (Choose two.)

   • AXML
   • BJSON
   • CASCII
   • DProtoBuf
   • EYAML

   Show answer

   Answer: BD

   Explanation

   Json and ProtoBuf (B and D) Explanation: gRPC is an open-source RPC framework. It is based on Protocol Buffers (Protobuf), which is an open source binary serialization protocol. gRPC provides a flexible, efficient, automated mechanism for serializing structured data, like XML, but is smaller and simpler to use. You define the structure using protocol buffer message types in .proto files. Each protocol buffer message is a small logical record of information, containing a series of name-value pairs. Cisco gRPC IDL uses the protocol buffers interface definition language (IDL) to define service methods, and define parameters and return types as protocol buffer message types. The gRPC requests are encoded and sent to the router using JSON. Clients can invoke the RPC calls defined in the IDL to program the router.

   Source: Adapted from community discussion — blezzzo

   Next question

9. Question 79 · 385 in bank

   Which scenario is an example of the pseudonymization of sensitive data that meets GDPR requirements?

   • Aimplementing X-Forwarded-For at the frontend of a web app to enable the source IP addresses of headers to change
   • Bseparating the sensitive data into its own dedicated, secured data store and using tokens in its place.
   • Cencrypting sensitive data at rest by using native cloud services and data in transit by using SSL/TLS transport.
   • Dleveraging an application load balancer at the frontend of a web app for SSL/TLS decryption to inspect data in transit.

   Show answer

   Answer: B

   Explanation

   Both pseudonymization and anonymization are methods of de-identifying PII, but the two techniques are distinct: Pseudonymization replaces the original PII with unique placeholders, pseudonyms, or reference tokens. Anonymization hides sensitive information through data masking (e.g., replacing it with blanks or Xs, scrambling the characters, substituting randomly generated information, etc.) https://www.integrate.io/blog/secure-pii-pseudonymization-how-to-do-it-right/#:~:text=Pseudonymization%20is%20a%20technique%20for,%2C%20a%20placeholder%20or%20pseudonym.)

   Source: Adapted from community discussion — ferock

   Next question

10. Question 80 · 385 in bank

    Select 2

    A developer must deploy a containerized application for network device inventory management. The developer sets up a Kubernetes cluster on two separate hypervisors. The SLA is not currently meeting a specified maximum value for network latency/jitter. CPU/memory and disk I/O are functioning properly. Which two design approaches resolve the issue? (Choose two.)

    • AEnable IPv6 within the cluster.
    • BUpgrade the server NIC card.
    • CDeploy the cluster to a bare metal server.
    • DReplace the HDD drives with SSD drives.
    • ECollocate services in the same pod.

    Show answer

    Answer: BE

    Explanation

    The answers are really confusing... A "pod" in kubernetes is an object, however here is considered the rack as a physical. If this is the case then BE are the options, if not, I am not sure... Just another confusing question of Cisco

    Source: Adapted from community discussion — Dave513

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-901 practice, question 71. 385 questions available.