350-401 practice questions 301–310

1. Question 301 · 1003 in bank

   

   Refer to the exhibit. An engineer is using XML in an application to send information to a RESTCONF-enabled device. After sending the request, the engineer gets this response message and an HTTP response code of 400. What do these responses tell the engineer?

   • AThe Accept header sent was application/xml.
   • BPOST was used instead of PUT to update.
   • CThe Content-Type header sent was application/xml.
   • DA JSON body was used.

   Show answer

   Answer: A

   Explanation

   A is Correct Accept and Content-type are both headers sent from a client (a browser) to a service. Accept header is a way for a client to specify the media type of the response content it is expecting and Content-type is a way to specify the media type of request being sent from the client to the server. The response was sent in XML so we can say the Accept header sent was application/xml.

   Source: Adapted from community discussion — juliok33p

   Next question

2. Question 302 · 1003 in bank

   Which action is the vSmart controller responsible for in an SD-WAN deployment?

   • Aonboard vEdge nodes into the SD-WAN fabric
   • Bgather telemetry data from vEdge routers
   • Cdistribute security information for tunnel establishment between vEdge routers
   • Dmanage, maintain, and gather configuration and status for nodes within the SD-WAN fabric

   Show answer

   Answer: C

   Explanation

   - onboard vEdge nodes into the SD-WAN fabric (vBond) - gather telemetry data from vEdge routers (vAnalytics) - distribute security information for tunnel establishment between vEdge routers (vSmart) - manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric (vManage)

   Source: Adapted from community discussion — iGlitch

   Next question

3. Question 303 · 1003 in bank

   What is used to validate the authenticity of client and is sent in HTTP requests as a JSON object?

   • ASSH
   • BHTTPS
   • CJWT
   • DTLS

   Show answer

   Answer: C

   Next question

4. Question 304 · 1003 in bank

   What is YANG used for?

   • Ascraping data via CLI
   • Bprocessing SNMP read-only polls
   • Cdescribing data models
   • Dproviding a transport for network configuration data between client and server

   Show answer

   Answer: C

   Next question

5. Question 305 · 1003 in bank

   Which HTTP status code is the correct response for a request with an incorrect password applied to a REST API session?

   • AHTTP Status Code: 200
   • BHTTP Status Code: 302
   • CHTTP Status Code: 401
   • DHTTP Status Code: 504

   Show answer

   Answer: C

   Explanation

   C is correct 200 OK 201 Created 204 No Content 301 Moved Permanently 302 Found 304 Not Modified 400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 405 Method Not Allowed 408 Request Timeout 409 Conflict 500 Internal Server Error 501 Not Implemented 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout

   Source: Adapted from community discussion — [Removed]

   Next question

6. Question 306 · 1003 in bank

   Which protocol does REST API rely on to secure the communication channel?

   • AHTTP
   • BSSH
   • CHTTPS
   • DTCP

   Show answer

   Answer: C

   Next question

7. Question 307 · 1003 in bank

   At which layer does Cisco DNA Center support REST controls?

   • Asession layer
   • Bnorthbound APIs
   • CEEM applets or scripts
   • DYAML output from responses to API calls

   Show answer

   Answer: B

   Explanation

   Intent API (Northbound) The Intent API is a Northbound REST API that exposes specific capabilities of the Cisco DNA Center platform. The Intent API provides policy-based abstraction of business intent, allowing focus on an outcome rather than struggling with individual mechanisms steps. The RESTful Cisco DNA Center Intent API uses HTTPS verbs (GET, POST, PUT, and DELETE) with JSON structures to discover and control the network. For more information, see Intent API.

   Source: Adapted from community discussion — Hamzaaa

   References

   • cisco.com documentation

   Next question

8. Question 308 · 1003 in bank

   Which algorithms are used to secure REST API from brute attacks and minimize the impact?

   • ASHA-512 and SHA-384
   • BMD5 algorithm-128 and SHA-384
   • CSHA-1, SHA-256, and SHA-512
   • DPBKDF2, BCrypt, and SCrypt

   Show answer

   Answer: D

   Explanation

   D One of the best practices to secure REST APIs is using password hash. Passwords must always be hashed to protect the system (or minimize the damage) even if it is compromised in some hacking attempts. There are many such hashing algorithms which can prove really effective for password security e.g. PBKDF2, bcrypt and scrypt algorithms. Other ways to secure REST APIs are: Always use HTTPS, Never expose information on URLs Usernames, passwords, session tokens, and API keys should not appear in the URL

   Source: Adapted from community discussion — divt

   Next question

9. Question 309 · 1003 in bank

   Which method of account authentication does OAuth 2.0 use within REST APIs?

   • Ausername/role combination
   • Baccess tokens
   • Ccookie authentication
   • Dbasic signature workflow

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/ftd-api/guide/ftd-rest-api/auth-ftd-rest-api.pdf

   References

   • Cisco documentation

   Next question

10. Question 310 · 1003 in bank

    Select 2

    Which two protocols are used with YANG data models? (Choose two.)

    • ATLS
    • BRESTCONF
    • CSSH
    • DNETCONF
    • EHTTPS

    Show answer

    Answer: BD

    Explanation

    The answers are "B" and "D". https://ftp.ripe.net/rfc/v3test/test8345.v2v3.html "8. Security Considerations The YANG modules specified in this document define a schema for data that is designed to be accessed via network management protocols such as NETCONF [RFC6241] or RESTCONF [RFC8040]. The lowest NETCONF layer is the secure transport layer, and the mandatory-to-implement secure transport is Secure Shell (SSH) [RFC6242]. The lowest RESTCONF layer is HTTPS, and the mandatory-to-implement secure transport is TLS [RFC5246]."

    Source: Adapted from community discussion — edg

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 301. 1003 questions available.