Cisco Cisco Certified DevNet Associate 200-901 Questions & Answers

• Question 471:

  Which protocol must be allowed on the firewall so that NTP services work properly?

  A. TCP

  B. ICMP

  C. BGP

  D. UDP

  Correct Answer: D

  https://www.cisco.com/c/en/us/support/docs/ip/network-time-protocol-ntp/108076-ntp-troubleshoot.html

• Question 472:

  How are load balancers used in modern application deployments?

  A. Turn off traffic and take down compute units, then update and bring the compute units back up.

  B. Allow traffic to continue as new compute units are brought up and old compute units are taken down.

  C. Allow http and https traffic to continue as old compute units are discontinued before new units are brought up.

  D. Bring up new compute units, test the compute units, and switch the traffic from old units to new units.

  Correct Answer: B

  From DEVASC training:

  Applications need to be available 24 hours every day. A successful web application should be able to handle ingress traffic even when the number of users drastically rises and be able to support any amount of traffic. For example, if your web

  page loads in a couple of seconds with 100,000 users a month, it should be able to load within the same time even with double or triple the amount of users.

• Question 473:

  Which advantage does the agile process offer compared to waterfall software development?

  A. to add or update features with incremental delivery

  B. to view the full scope of end-to-end work

  C. to have each phase end before the next begins

  D. to fix any issues at the end of the development cycle

  Correct Answer: A

  Agile uses smaller time increments or "sprints," that encompass the full process of analysis, design, code, and test but on a much smaller aspect of an application. The goal is to finish a feature or capability for each sprint, resulting in a potentially shippable incremental piece of software.

• Question 474:

  What is the purpose of a MAC address on a network device?

  A. unique network address that identifies the network interface of a device

  B. unique network interlace address that is provided by the DHCP server

  C. unique hardware address that identifies the network interface of a device

  D. unique hardware interface address that is provided by the central switch

  Correct Answer: C

• Question 475:

  What are two benefits of model-driven programmability? (Choose two.)

  A. easier to design, deploy, and manage APIs

  B. single choice of transport, protocol, and encoding

  C. models decoupled from transport, protocol, and encoding

  D. model-based, structured, and human friendly

  E. model-driven APIs for abstraction and simplification

  Correct Answer: CE

  https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2018/pdf/BRKSPG-2303.pdfS

• Question 476:

  Which API must an engineer use to change a netmask on a Cisco IOS XE device?

  A. Meraki

  B. SD-WAN

  C. RESTCONF/YANG

  D. DNAC

  Correct Answer: C

• Question 477:

  Refer to the exhibit.

  

  Which OWASP threat does this example demonstrate?

  A. broken access control

  B. cross-site scripting

  C. SQL injection

  D. man-in-the-middle

  Correct Answer: B

  https://owasp.org/www-chapter-coimbatore/assets/files/Web%20Application%20Security%20Adithyan% 20AK.pdf

• Question 478:

  A company is looking for a cloud deployment which will only use the on-premise infrastructure, is user self- service, and is easy to scale. Which cloud solution should be selected for these requirements?

  A. multi

  B. private

  C. hybrid

  D. public

  Correct Answer: B

  The only one that uses only onprem is Private

• Question 479:

  Refer to the exhibit.

  

  Which function does the EXPOSE line perform when building an image from this Dockerfile?

  A. Local port 8080 of the container that launched with this docker image is accessible from co-hosted containers and external clients.

  B. Local port 8080 is not reachable at all because no IP address is specified along with the EXPOSE command of the Dockerfile.

  C. Local port 8080 is accessible from other containers running on the same docker host as the container that launched with this docker image.

  D. Local port 8080 of the container that launched with this docker image is accessible to external clients.

  Correct Answer: C

  By default, the EXPOSE instruction does not expose the container's ports to be accessible from the host. In other words, it only makes the stated ports available for inter-container interaction.

  Whereas publishing a port using either -P or -p exposes it, exposing a port using EXPOSE or Expose does not publish it.

  So, while exposed ports can only be accessed internally, published ports can be accessible by external containers and services.

  https://www.whitesourcesoftware.com/free-developer-tools/blog/docker-expose-port/

• Question 480:

  Refer to the exhibit.

  

  Which Device limits traffic between Server 1 and Server 2?

  A. Device B

  B. Device C

  C. Device D

  D. Device E

  Correct Answer: D

  The switch is the device that splits the network into multiple VLANs, thus limiting the communication The router will route between the VLANs and enable traffic