Cisco Cisco Certified DevNet Associate 200-901 Questions & Answers

• Question 241:

  Which implementation creates a group of devices on one or more LANs that are configured to communicate as if they were attached to the same wire?

  A. WLAN

  B. VLAN

  C. IPsec

  D. HSRP

  Correct Answer: B

• Question 242:

  Which application should be used to externally access all applications deployed in the same host machine with a single public IP address and port, when each application listens on different local ports?

  A. reverse proxy

  B. load balancer

  C. DNS

  D. firewall

  Correct Answer: A

  One option for accessing multiple applications on a single host machine with a single public IP address and port is to use a reverse proxy. A reverse proxy is a type of server that sits in front of one or more backend servers, intercepting traffic from clients and forwarding it to the appropriate backend server.

  To use a reverse proxy in this scenario, you would configure the reverse proxy to listen on the public IP address and port, and then configure it to forward traffic to the appropriate local port based on the hostname or URL requested by the client

• Question 243:

  Refer to the exhibit.

  

  A developer must check packages on web load balancers that use nginx packages. The developer updates the servers as required in Ansible inventory and prepares an Ansible playbook to automate this workflow on related servers. Which process is being automated by the Ansible playbook?

  A. verifying that nginx is installed only if apache2 is unavailable on the system, and then updating all the other packages

  B. verifying, without installing, that apache2 is unavailable and that nginx is installed, and then updating the repository to the latest version

  C. uninstalling the apache2 server, installing the nginx server, and then updating all the packages to the latest version

  D. installing nginx, uninstalling apache2, and then verifying that the package repository is at the latest version

  Correct Answer: C

• Question 244:

  Refer to the exhibit.

  

  An engineer must check the admin rights of users on a database regularly and prepares the Python script to automate the process. The script connects to the database and runs a query. What is a security issue about the secrets in the code that relates to secret protection?

  A. They must be stored in configuration files if there is a possibility of leakage.

  B. They must be Base64-encoded if stored in the user database.

  C. They must be encrypted if stored in the user database.

  D. They must be stored in configuration files if no authentication will be used.

  Correct Answer: C

  Data at rest (storage)

  Any data that is stored can be accessed digitally or physically.

  Encrypting data at rest protects it against physical theft of the file system storage devices, protects against unauthorized access to data, and satisfies information security or regulatory requirements.

  Full disk encryption

  File system encryption

  Database encryption

  >>>>>>>>>>>>>>>>>

  Also look at this: https://spectralops.io/blog/where-your-code-secrets-hide-filetypes/

• Question 245:

  Refer to the exhibit.

  

  Which two files are being edited in the unified diff? (Choose two.)

  A. README.md

  B. setup.py

  C. axl.py

  D. ciscoaxl.py

  E. index.py

  Correct Answer: BC

• Question 246:

  Refer to the exhibit.

  

  A network engineer must collect information from the network using Cisco DNA Center APIs. The script must query for the devices with 'platformId' 'C9540-x' and then send commands to be executed. Which process is automated by the Python script?

  A. results gathering of the show version and show ip int brief commands

  B. output of show ip int brief command on devices of type C9500-40X

  C. execution information of the show version and show ip int brief commands

  D. list of executed commands on C9500-40X and the information of show ip int brief command

  Correct Answer: B

• Question 247:

  Refer to the exhibit.

  

  What do all the calls shown in the sequence diagram have in common?

  A. All the calls are optional.

  B. All the calls are asynchronous.

  C. All the calls are synchronous.

  D. All the calls depend on the catalog.

  Correct Answer: B

  A synchronous message is denoted by the solid arrowhead. An asynchronous message is denoted by line arrowhead. There might be also the asynchronous return message which is denoted by the dashed line (not in a diagram here). Here all the messages are denoted by line arrowhead so that means all the messages are asynchronous.

• Question 248:

  What is a tenet of test-driven development?

  A. write documentation for tests

  B. write tests after adding new blocks of code

  C. write and run tests before writing new code

  D. run tests after writing new code

  Correct Answer: C

• Question 249:

  Which two protocols are used to apply a configuration change on a Cisco IOS XE device? (Choose two)

  A. CCX

  B. RESTCONF

  C. NETCONF

  D. HSRP

  E. CDP

  Correct Answer: BC

• Question 250:

  Which network device monitors incoming and outgoing traffic and decides whether to allow or block specific traffic based on a defined set of rules?

  A. switch

  B. load balancer

  C. reverse proxy

  D. firewall

  Correct Answer: D