Cisco Cisco Certified DevNet Associate 200-901 Questions & Answers

• Question 191:

  A developer is developing a web application that uses username and password to authenticate to the next service. The user credentials must be available at any time in the application. The developer must choose and implement a secure method of storing the authentication credentials that are used in the automation code. Which password handling method must be used to minimize the security risk?

  A. Store the username and password in a separate configuration file.

  B. Store the username and password in a vault.

  C. Store the passwords in a dictionary.

  D. Store the username and password in code.

  Correct Answer: B

  Storing the username and password in a separate configuration file can potentially expose the credentials to unauthorized users if the file is not properly secured. It is generally more secure to store sensitive information, such as passwords, in a secure storage system, such as a vault, rather than in a configuration file or in code.

• Question 192:

  A development team is creating an application used for contactless payments. The application must:

  1.

  Be web-based

  2.

  Capture and process the credit card information for a purchase.

  Which security action must the web application use to gather and process the private customer data?

  A. Enable RATs to monitor the web application remotely.

  B. Disable botnets to eliminate risks.

  C. Disable TLS to increase the connection speed.

  D. Enable the encryption of network traffic.

  Correct Answer: D

• Question 193:

  An engineer needs to collect information about 20,000 Bluetooth clients using the Cisco Meraki API. The API returns only 1,000 results. One of the HTTP response headers has the data:

  Link: https://api.meraki.com.info/api/v0/networks/ABC/bluetoothClients?perPage=1000andstartingAfter=1000>;rel="next"

  Which RFC is implemented by the API to apply the restriction?

  A. RFC 5988 ?Web Linking

  B. RFC 5890 ?Response Constraints

  C. RFC 5005 ?Feed Paging and Archiving

  D. RFC 5446 ?Content Limits

  Correct Answer: C

  RFC5005 does reference this https://www.rfc-editor.org/rfc/rfc5005.html

• Question 194:

  Which platform has an API that has the capability to obtain a list of vulnerable software on user devices?

  A. Cisco Advanced Malware Protection

  B. Cisco Umbrella

  C. Cisco Identity Services Engine

  D. Cisco Firepower

  Correct Answer: A

• Question 195:

  A developer creates an application that must provide an encrypted connection or API keys. The keys will be used to communicate with a REST API. Which command must be used for the secure connection?

  A. curl -X PUSH `http://username.app.com/endpoint/?api_key=12345abcdef'

  B. curl -v `ftp://username.app.com/endpoint/?api_key=12345abcdef'

  C. curl -X GET `https://username.app.com/endpoint/?api_key=12345abcdef'

  D. curl -X GET `http://username.app.com/endpoint/?api_key=12345abcdef'

  Correct Answer: C

• Question 196:

  A developer creates a new application, but the application must be tested before being released to a customer. When a mobile phone that uses 4G is used to access the application, the request fails. Why does the connection to the application fail?

  A. The application is hosted on premises and VPN connectivity is required

  B. The application must be added to the production server before testing.

  C. The application must be moved to the cloud before testing is possible.

  D. The application connectivity is limited to HTTPS protocol.

  Correct Answer: A

• Question 197:

  What are two benefits of using classes over functions when writing applications? (Choose two.)

  A. improved readability

  B. increased compatibility

  C. variable reusability

  D. increased performance

  E. code organization

  Correct Answer: CE

• Question 198:

  Which standard supported by Cisco IOS XE and Cisco NX-OS is used for automating the configuration of multiple devices across a network?

  A. SNMP - YANG

  B. SYSLOG - YANG

  C. CLI - YANG

  D. NETCONF - YANG

  Correct Answer: D

• Question 199:

  What is a principle of a code review process?

  A. Changes are made after the code is submitted to source control.

  B. It must not prevent code from getting into production as quickly as possible.

  C. Naming standards must be consistent.

  D. A technical lead must sign off on the review.

  Correct Answer: C

• Question 200:

  A developer has addressed a bug that was found in the production code of an application. A separate file named `bug427896191v_fix" has been created with the changes to the code. Which Git command must be used to incorporate the bug fix into the production code?

  A. git rebase

  B. git cat-file

  C. git merge-file

  D. git bisert

  Correct Answer: C