Cisco Cisco Certified DevNet Professional 300-910 Questions & Answers

• Question 71:

  Refer to the exhibit.

  

  The push_configs.yml playbook returns the error shown.

  Which action resolves the error?

  A. Install the Paramiko library on the host that runs Ansible

  B. Generate a new SSH key pair and add the public key to the target machine

  C. Export the ANSIBLE_HOST_KEY_CHECKING=False variable

  D. Comment out the StrictHostKeyChecking=yes line from ansible.cfg

  Correct Answer: C

• Question 72:

  A security team is running vulnerability scans against a CI/CD pipeline. The reports show that RDBMS secrets were found hardcoded in Ansible scripts. The RDBMS resides in the internal network but is accessible from a jump server that resides in a public network.

  If an attacker gains access to the scripts, what is the risk exposure?

  A. The Automation server is at risk of being compromised.

  B. The Ansible scripts run through encrypted SSH connections.

  C. The internal network is at risk of being compromised.

  D. The entire CI/CD-related infrastructure is at risk.

  Correct Answer: C

  The internal network is at risk of being compromised if an attacker gains access to the Ansible scripts, as the scripts contain hardcoded secrets for the RDBMS which is accessible from a jump server in a public network. This presents a risk as the secrets can be used to gain access to the RDBMS, and from there, the attacker could potentially gain access to the internal network. Additionally, the entire CI/CD-related infrastructure could be at risk if the attacker is able to gain access to the RDBMS, as they could potentially manipulate the data or scripts in order to cause disruption or damage.

• Question 73:

  Which two elements help to secure your API keys? (Choose two.)

  A. ramdomness

  B. SHA1

  C. triple AES

  D. rotation

  E. dictionary

  Correct Answer: AC

• Question 74:

  Which Dockerfile produces an efficient image rebuild when the exposed port Python dependency, or MyApp source code is modified?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 75:

  Refer to the exhibit.

  

  A developer is creating a script to test APIs. The Cisco Webex API and a CI/CD pipeline are tested to ensure that the script runs without problems. The script is executed without issues locally, but the CI/CD system returns the error shown. What is the problem with the script?

  A. The CI/CD system is configured incorrectly to import the dependencies to the code

  B. The code is pushed incorrectly to the CI/CD system

  C. The version of Python is wrong in the CI/CD pipeline

  D. The CI/CD system is configured incorrectly to download the required dependencies

  Correct Answer: D

  The Cisco Webex API and CI/CD pipeline need to be configured correctly to download the required dependencies in order for the script to run without issues. If the dependencies are not downloaded correctly, the script will fail to run properly and throw an error. The Cisco Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS) Study Manual provides a detailed explanation of how to properly configure the CI/CD pipeline for the Cisco Webex API.

• Question 76:

  What is as responsibility for teams running private cloud servers that is less of a concern when running in the public cloud?

  A. cost

  B. metrics and monitoring

  C. hardware maintenance

  D. credentials management

  Correct Answer: D

  The responsibility of credentials management is less of a concern when running in the public cloud. This is because the public cloud provider typically manages the credentials and handles authentication and authorization for the cloud services. In a private cloud environment, the organization must manage the credentials themselves, as well as authentication and authorization for the cloud services. References: Cisco Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS) Study Manual, Chapter 2, Section 2.1: Cloud Computing Models, Page 14-15.

• Question 77:

  A developer is nearing the end of a software development cycle and is ready to deploy the software. The customer wants to continue using a secure software development lifecycle methodology and must plan for postproduction components. Which two areas should be the developer address? (Choose two.)

  A. performing code reviews

  B. requirement gathering

  C. change management process

  D. new code scanning

  E. rollback plans

  Correct Answer: AD

• Question 78:

  Which type of security testing should be performed as a part of a CI/CD pipeline by analyzing the source code itself without compiling the code into a running executable?

  A. Dynamic Application Security Testing

  B. Runtime Application Health-Protection

  C. Continuous Application Security Testing

  D. Static Analysis Security Testing

  Correct Answer: D

• Question 79:

  Which method is a safe way to provide a username/password combination to an application running as a service in a Docker container?

  A. encode the value with base64 in a secure DNS CTEXT entry

  B. as an environment variable in the Dockerfile

  C. Docker environment variable

  D. Docker secrets

  Correct Answer: D

  a docker secret is a blob of data, such as a password, SSH private key, SSL certificate, or another piece of data that should not be transmitted over a network or stored unencrypted in a Dockerfile or in your application's source code

• Question 80:

  How does eliminating hardcoded or default passwords help to secure an environment?

  A. helps by enforcing your password in a repository and storing it in a secure vault

  B. helps to manage passwords centrally

  C. helps penetration testing team to focus on other issues more efficiently

  D. helps by removing back doors in your environments

  Correct Answer: A

  https://www.beyondtrust.com/resources/glossary/hardcoded-embedded-passwords