Question 1

Which tow actions must be taken when an observable microservice application is developed? (Choose two.)

Accepted Answer

A)  Know the state of a single instance of a single service. 
B)  Place "try/except" statement in code. 
C)  Place log statements in the code. 
D)  Use distributed tracing techniques. 
E)  Deploy microservice to multiple datacenters. 
A)  Know the state of a single instance of a single service. 
B)  Place "try/except" statement in code. 
C)  Place log statements in the code. 
D)  Use distributed tracing techniques. 
E)  Deploy microservice to multiple datacenters.

Question 2

Where should distributed load balancing occur in a horizontally scalable architecture?

Accepted Answer

A)  firewall-side/policy load balancing 
B)  network-side/central load balancing 
C)  service-side/remote load balancing 
D)  client-side/local load balancing 
A)  firewall-side/policy load balancing 
B)  network-side/central load balancing 
C)  service-side/remote load balancing 
D)  client-side/local load balancing

Question 3

Refer to the exhibits above and click on the IETF Routing tab in the top left corner to help with this question. A developer is trying to update the routing instance by adding a new route to the routes list using the URL in the exhibit. What action must be taken to fix the error being received?

Accepted Answer

A)  Fix the body being sent to update the routes list 
B)  Change the HTTP Method being used to make the change 
C)  Change the url to "/ietf-routing:routing/routing-instance=default" 
D)  Update the authorization credentials 
E)  Change the URL to "/ietf-routing:routing-instance/default" 
A)  Fix the body being sent to update the routes list 
B)  Change the HTTP Method being used to make the change 
C)  Change the url to "/ietf-routing:routing/routing-instance=default" 
D)  Update the authorization credentials 
E)  Change the URL to "/ietf-routing:routing-instance/default"

Question 4

A container running a Python script is failing when it reaches the integration testing phase of the CI/CD process. The code has been reviewed thoroughly and the build process works on this container and all other containers pass unit and integration testing. What should be verified to resolve the issue?

Accepted Answer

A)  that the correct port is exposed in the Dockerfile 
B)  that the necessary modules and packages are installed on build 
C)  that the script is running from the night directory 
D)  that the Python version of the container image is correct 
A)  that the correct port is exposed in the Dockerfile 
B)  that the necessary modules and packages are installed on build 
C)  that the script is running from the night directory 
D)  that the Python version of the container image is correct

Question 5

How is AppDynamics used to instrument an application?

Accepted Answer

A)  Enables instrumenting a backend web server for packet installation by using an AppDynamics agent. 
B)  Retrieves a significant amount of information from the perspective of the database server by using application monitoring. 
C)  Provides visibility into the transaction logs that can be correlated to specific business transaction requests. 
D)  Monitors traffic flows by using an AppDynamics agent installed on a network infrastructure device. 
A)  Enables instrumenting a backend web server for packet installation by using an AppDynamics agent. 
B)  Retrieves a significant amount of information from the perspective of the database server by using application monitoring. 
C)  Provides visibility into the transaction logs that can be correlated to specific business transaction requests. 
D)  Monitors traffic flows by using an AppDynamics agent installed on a network infrastructure device.

Question 6

Which type of file is created from issued intermediate, root, and primary certificates for SSL installation on a server?

Accepted Answer

A)  DER 
B)  CSR 
C)  PEM 
D)  CRT 
A)  DER 
B)  CSR 
C)  PEM 
D)  CRT

Question 7

An application uses OAuth to get access to several API resources on behalf of an end user. What are two valid parameters to send to the authorization server as part of the first step of an authorization code grant flow? (Choose two.)

Accepted Answer

A)  URI to which the authorization server will send the user-agent back when access is granted or denied 
B)  list of the API resources that the application is requesting to access 
C)  secret that was generated by the authorization server when the application registered as an OAuth integration 
D)  list of scopes that correspond to the API resources to which the application is requesting to access 
E)  name of the application under which the application registered as an OAuth integration 
A)  URI to which the authorization server will send the user-agent back when access is granted or denied 
B)  list of the API resources that the application is requesting to access 
C)  secret that was generated by the authorization server when the application registered as an OAuth integration 
D)  list of scopes that correspond to the API resources to which the application is requesting to access 
E)  name of the application under which the application registered as an OAuth integration

Question 8

A developer is building an application to access a website. When running the application, an HTTP 403 error code has been received. How should the application be modified to handle this code?

Accepted Answer

A)  Create a loop on cancel the operation and run a new one after the code is received. 
B)  Use exponential backoff when retrying distributed services and other remote endpoints. 
C)  Build a try/except around the urlopen to find errors occurring in the request. 
D)  Redirect the request to an internal web server and make a new request from the internal resource. 
A)  Create a loop on cancel the operation and run a new one after the code is received. 
B)  Use exponential backoff when retrying distributed services and other remote endpoints. 
C)  Build a try/except around the urlopen to find errors occurring in the request. 
D)  Redirect the request to an internal web server and make a new request from the internal resource.

Question 9

A web application is susceptible to cross-site scripting. Which two methods allow this issue to be mitigated? (Choose two.)

Accepted Answer

A)  Use only drop downs. 
B)  Limit user input to acceptable characters. 
C)  Encrypt user input on the client side. 
D)  Use AES encryption to secure the script. 
E)  Remove all HTML/XML tags from user input. 
A)  Use only drop downs. 
B)  Limit user input to acceptable characters. 
C)  Encrypt user input on the client side. 
D)  Use AES encryption to secure the script. 
E)  Remove all HTML/XML tags from user input.

Question 10

What are two features of On-Box Python for hosting an application on a network device? (Choose two.)

Accepted Answer

A)  It has direct access to Cisco IOS XE CLI commands. 
B)  It is a Python interpreter installed inside the guest shell. 
C)  It enables execution of XML scripts on a Cisco IOS XE router or switch. 
D)  It supports Qt for graphical interfaces and dashboards. 
E)  It has access to Cisco IOS XE web UI through a controller. 
A)  It has direct access to Cisco IOS XE CLI commands. 
B)  It is a Python interpreter installed inside the guest shell. 
C)  It enables execution of XML scripts on a Cisco IOS XE router or switch. 
D)  It supports Qt for graphical interfaces and dashboards. 
E)  It has access to Cisco IOS XE web UI through a controller.

Question 11

While working with the Webex API, on an application that uses end-to-end encryption, a webhook has been received. What must be considered to read the message?

Accepted Answer

A)  Webhook information cannot be used to read the message because of end-to-end encryption. The API key is needed to decrypt the message. 
B)  Webhook returns the full unencrypted message. Only the body is needed to query the API. 
C)  Webhook returns a hashed version of the message that must be unhashed with the API key. 
D)  Webhook returns message identification. To query, the API is needed for that message to get the decrypted information. 
A)  Webhook information cannot be used to read the message because of end-to-end encryption. The API key is needed to decrypt the message. 
B)  Webhook returns the full unencrypted message. Only the body is needed to query the API. 
C)  Webhook returns a hashed version of the message that must be unhashed with the API key. 
D)  Webhook returns message identification. To query, the API is needed for that message to get the decrypted information.

Question 12

A heterogeneous network of vendors and device types needs automating for better efficiency and to enable future automated testing. The network consists of switches, routers, firewalls and load balancers from different vendors, however they all support the NETCONF/RESTCONF configuration standards and the YAML models with every feature the business requires. The business is looking for a buy versus build solution because they cannot dedicate engineering resources, and they need configuration diff and rollback functionality from day 1. Which configuration management for automation tooling is needed for this solution?

Accepted Answer

A)  Ansible 
B)  Ansible and Terraform 
C)  NSO 
D)  Terraform 
E)  Ansible and NSO 
A)  Ansible 
B)  Ansible and Terraform 
C)  NSO 
D)  Terraform 
E)  Ansible and NSO

Question 13

A timeframe custom dashboard must be developed to present data collected from Cisco Meraki. The dashboard must include a wireless health alert count. What needs to be built as a prerequisite?

Accepted Answer

A)  A publicly available HTTP server to receive Meraki Webhooks from the Meraki Scanning API. 
B)  A publicly available HTTP server to receive Meraki Webhooks from the Meraki Dashboard API. 
C)  A daemon to consume the Wireless Health endpoint of the Meraki Dashboard API. 
D)  A daemon to consume the Wireless Health endpoint of the Meraki Scanning API. 
A)  A publicly available HTTP server to receive Meraki Webhooks from the Meraki Scanning API. 
B)  A publicly available HTTP server to receive Meraki Webhooks from the Meraki Dashboard API. 
C)  A daemon to consume the Wireless Health endpoint of the Meraki Dashboard API. 
D)  A daemon to consume the Wireless Health endpoint of the Meraki Scanning API.

Question 14

What are two steps in the OAuth2 protocol flow? (Choose two.)

Accepted Answer

A)  The user is authenticated by the authorization server and granted an access token. 
B)  The user's original credentials are validated by the resource server and authorization is granted. 
C)  The user indirectly requests authorization through the authorization server. 
D)  The user requests an access token by authentication and authorization grant presentation. 
E)  The user requests the protected resource from the resource server using the original credentials. 
A)  The user is authenticated by the authorization server and granted an access token. 
B)  The user's original credentials are validated by the resource server and authorization is granted. 
C)  The user indirectly requests authorization through the authorization server. 
D)  The user requests an access token by authentication and authorization grant presentation. 
E)  The user requests the protected resource from the resource server using the original credentials.

Question 15

Refer to the exhibit. Which set of API requests must be executed by a Webex Teams bot after receiving a webhook callback to process messages in a room and reply with a new message back to the same room?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 16

Refer to the exhibit. What is the output of this IOS-XE configuration program?

Accepted Answer

A)  interface operational status in IPv6 addresses 
B)  interface administrative status in IPv4 addresses 
C)  interface operational status in IPv4 addresses 
D)  interface administrative status in IPv6 addresses 
A)  interface operational status in IPv6 addresses 
B)  interface administrative status in IPv4 addresses 
C)  interface operational status in IPv4 addresses 
D)  interface administrative status in IPv6 addresses

Question 17

Refer to the exhibit. A kubeconfig file to manage access to clusters is provided. How many clusters are defined and which of them are accessed using username/password authentication versus certificate?

Accepted Answer

A)  two clusters; scratch 
B)  three clusters; scratch 
C)  three clusters; development 
D)  two clusters; development 
A)  two clusters; scratch 
B)  three clusters; scratch 
C)  three clusters; development 
D)  two clusters; development

Question 18

How should a web application be designed to work on a platform where up to 1000 requests per second can be served?

Accepted Answer

A)  Use algorithms like random early detection to deny excessive requests. 
B)  Set a per-user limit (for example, 5 requests/minute/ user) and deny the requests from the users who have reached the limit. 
C)  Only 1000 user connections are allowed; further connections are denied so that all connected users can be served. 
D)  All requests are saved and processed one by one so that all users can be served eventually. 
A)  Use algorithms like random early detection to deny excessive requests. 
B)  Set a per-user limit (for example, 5 requests/minute/ user) and deny the requests from the users who have reached the limit. 
C)  Only 1000 user connections are allowed; further connections are denied so that all connected users can be served. 
D)  All requests are saved and processed one by one so that all users can be served eventually.

Question 19

Which Puppet manifest needs to be used to configure an interface GigabitEthernet 0/1 on a Cisco IOS switch?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 20

Click on the GET Resource button above to view resources that will help with this question.       An engineer is managing a DC with 6000 Cisco UCS servers installed and running. The engineer has been asked to identify all resources where the model is in the UCSB family and the available memory is less than or equal to 5 GB. Which REST API call accomplishes this task?

Accepted Answer

A)  GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=not(Model eq 'UCSC') and AvailableMemory le 5000 
B)  GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=Model eq 'UCSB' and AvailableMemory lt 5000 
C)  GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB') and AvailableMemory lt 5000 
D)  GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB') and AvailableMemory le 5000 
A)  GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=not(Model eq 'UCSC') and AvailableMemory le 5000 
B)  GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=Model eq 'UCSB' and AvailableMemory lt 5000 
C)  GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB') and AvailableMemory lt 5000 
D)  GET/api/v1/compute/RackUnits?$select=Vendor,Model,Serial&$filter=contains(Model, UCSB') and AvailableMemory le 5000

Exam 43: CCDE Design Written

Which tow actions must be taken when an observable microservice application is developed? (Choose two.)

Where should distributed load balancing occur in a horizontally scalable architecture?

Refer to the exhibits above and click on the IETF Routing tab in the top left corner to help with this question. A developer is trying to update the routing instance by adding a new route to the routes list using the URL in the exhibit. What action must be taken to fix the error being received?

How is AppDynamics used to instrument an application?

Which type of file is created from issued intermediate, root, and primary certificates for SSL installation on a server?

An application uses OAuth to get access to several API resources on behalf of an end user. What are two valid parameters to send to the authorization server as part of the first step of an authorization code grant flow? (Choose two.)

A developer is building an application to access a website. When running the application, an HTTP 403 error code has been received. How should the application be modified to handle this code?

A web application is susceptible to cross-site scripting. Which two methods allow this issue to be mitigated? (Choose two.)

What are two features of On-Box Python for hosting an application on a network device? (Choose two.)

While working with the Webex API, on an application that uses end-to-end encryption, a webhook has been received. What must be considered to read the message?

A timeframe custom dashboard must be developed to present data collected from Cisco Meraki. The dashboard must include a wireless health alert count. What needs to be built as a prerequisite?

What are two steps in the OAuth2 protocol flow? (Choose two.)

Refer to the exhibit. Which set of API requests must be executed by a Webex Teams bot after receiving a webhook callback to process messages in a room and reply with a new message back to the same room?

Refer to the exhibit. What is the output of this IOS-XE configuration program?

Refer to the exhibit. A kubeconfig file to manage access to clusters is provided. How many clusters are defined and which of them are accessed using username/password authentication versus certificate?

How should a web application be designed to work on a platform where up to 1000 requests per second can be served?

Which Puppet manifest needs to be used to configure an interface GigabitEthernet 0/1 on a Cisco IOS switch?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters