Question 1

The UCS Python SDK includes modules for Service Profile template creation. Which two UCS Service Profile template types are supported? (Choose two.)

Accepted Answer

A)  initial-template 
B)  updating-template 
C)  abstract-template 
D)  attached-template 
E)  base-template 
A)  initial-template 
B)  updating-template 
C)  abstract-template 
D)  attached-template 
E)  base-template

Question 2

A developer deploys a SQLite database in a Docker container. Single-use secret keys are generated each time a user accesses the database. The keys expire after 24 hours. Where should the keys be stored?

Accepted Answer

A)  Outside of the Docker container in the source code of applications that connect to the SQLite database. 
B)  In a separate file inside the Docker container that runs the SQLite database. 
C)  In an encrypted database table within the SQLite database. 
D)  In a separate storage volume within the Docker container. 
A)  Outside of the Docker container in the source code of applications that connect to the SQLite database. 
B)  In a separate file inside the Docker container that runs the SQLite database. 
C)  In an encrypted database table within the SQLite database. 
D)  In a separate storage volume within the Docker container.

Question 3

Which two techniques protect against injection attacks? (Choose two.)

Accepted Answer

A)  input validation 
B)  trim whitespace 
C)  limit text areas to 255 characters 
D)  string escaping of user free text and data entry 
E)  only use dropdown, checkbox, and radio button fields 
A)  input validation 
B)  trim whitespace 
C)  limit text areas to 255 characters 
D)  string escaping of user free text and data entry 
E)  only use dropdown, checkbox, and radio button fields

Question 4

Refer to the exhibits which show the documentation associated with the create port object API call in Cisco Firepower Threat Defense, and a cURL command. Which data payload completes the cURL command to run the API call?

Accepted Answer

A)  "icmpv4Type": "ANY", "name": "string", "type": "icmpv4portobject" 
B)  "description": "This is an ICMP Echo", "icmpv4Code": "8", "icmpv4Type": "Echo", "isSystemDefined": true, "name": "ICMP Echo", "version": "2.2" 
C)  "description": "string", "icmpv4Code": "ANY_IPV4", "id": "string", "isSystemDefined": "string", "type": "icmpv4portobject", "version": "string" 
D)  "icmpv4Type": null, 
A)  "icmpv4Type": "ANY", "name": "string", "type": "icmpv4portobject" 
B)  "description": "This is an ICMP Echo", "icmpv4Code": "8", "icmpv4Type": "Echo", "isSystemDefined": true, "name": "ICMP Echo", "version": "2.2" 
C)  "description": "string", "icmpv4Code": "ANY_IPV4", "id": "string", "isSystemDefined": "string", "type": "icmpv4portobject", "version": "string" 
D)  "icmpv4Type": null,

Question 5

What is a capability of the End User Monitoring feature of the AppDynamics platform?

Accepted Answer

A)  discovers traffic flows, nodes, and transport connections where network or application/network issues are developing 
B)  monitoring local processes, services, and resource use, to explain problematic server performance 
C)  identifies the slowest mobile and IoT network requests, to locate the cause of problems 
D)  provides metrics on the performance of the database to troubleshoot performance-related issues 
A)  discovers traffic flows, nodes, and transport connections where network or application/network issues are developing 
B)  monitoring local processes, services, and resource use, to explain problematic server performance 
C)  identifies the slowest mobile and IoT network requests, to locate the cause of problems 
D)  provides metrics on the performance of the database to troubleshoot performance-related issues

Question 6

Application sometimes store configuration as constants in the code, which is a violation of strict separation of configuration from code. Where should application configuration be stored?

Accepted Answer

A)  environment variables 
B)  YAML files 
C)  Python libraries 
D)  Dockerfiles 
E)  INI files 
A)  environment variables 
B)  YAML files 
C)  Python libraries 
D)  Dockerfiles 
E)  INI files

Question 7

Refer to the exhibit. This cURL POST request creates an OAuth access token for authentication with FDM API requests. What is the purpose of the file "@token_data" that cURL is handling?

Accepted Answer

A)  This file is given as input to store the access token received from FDM. 
B)  This file is used to send authentication-related headers. 
C)  This file contains raw data that is needed for token authentication. 
D)  This file is a container to log possible error responses in the request. 
A)  This file is given as input to store the access token received from FDM. 
B)  This file is used to send authentication-related headers. 
C)  This file contains raw data that is needed for token authentication. 
D)  This file is a container to log possible error responses in the request.

Question 8

In the three-legged OAuth2 process, after the authorization server presents a form to the resource owner to grant access, what is the next step?

Accepted Answer

A)  The resource owner authenticates and optionally authorizes with the authorization server. 
B)  The user who owns the resource initiates a request to the OAuth client. 
C)  If the resource owner allows access, the authorization server sends the OAuth client a redirection. 
D)  A form to allow or restrict access is submitted by the owner of the resource. 
A)  The resource owner authenticates and optionally authorizes with the authorization server. 
B)  The user who owns the resource initiates a request to the OAuth client. 
C)  If the resource owner allows access, the authorization server sends the OAuth client a redirection. 
D)  A form to allow or restrict access is submitted by the owner of the resource.

Question 9

Refer to the exhibit. The information in the exhibit was obtained by using RESTCONF and querying URI /restconf/data/native/ip/route. Which RESTCONF call and which JSON code is used to add a new IP route to a network of 172.30.200.0/24 through the GigabitEthernet2 interface? (Choose two.)

Accepted Answer

A)    
B)    
C)    
D)    
E)    
A)    
B)    
C)    
D)    
E)

Question 10

An organization manages a large cloud-deployed application that employs a microservices architecture. No notable issues occur with downtime because the services of this application are redundantly deployed over three or more data center regions. However, several times a week reports are received about application slowness. The container orchestration logs show faults in a variety of containers that cause them to fail and then spin up brand new. Which action must be taken to improve the resiliency design of the application while maintaining current scale?

Accepted Answer

A)  Update the base image of the containers. 
B)  Test the execution of the application with another cloud services platform. 
C)  Increase the number of containers running per service. 
D)  Add consistent "try/catch(exception)" clauses to the code. 
A)  Update the base image of the containers. 
B)  Test the execution of the application with another cloud services platform. 
C)  Increase the number of containers running per service. 
D)  Add consistent "try/catch(exception)" clauses to the code.

Question 11

Refer to the exhibit. The presented application consists of a Nginx container and a load balancer service. Which GitLab CI/CD configuration implements the Kubernetes deployment?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 12

Refer to the exhibit. An engineer is configuring Ansible to run playbooks against Cisco IOS XE Software. What should be configured in ansible.cfg as the connection type?

Accepted Answer

A)  network_cli 
B)  ssh 
C)  shell 
D)  command 
A)  network_cli 
B)  ssh 
C)  shell 
D)  command

Question 13

Which RFC5988 (Web Linking) relation type is used in the Link header to control pagination in APIs?

Accepted Answer

A)  rel="index" 
B)  rel="page" 
C)  rel="next" 
D)  rel="section" 
A)  rel="index" 
B)  rel="page" 
C)  rel="next" 
D)  rel="section"

Question 14

Refer to the exhibit. Which parameter is missing from the JSON response to confirm the API version that is used?

Accepted Answer

A)  version 4 
B)  v 10 
C)  2 
D)  version 2 
A)  version 4 
B)  v 10 
C)  2 
D)  version 2

Question 15

Which two files are needed to create a Cisco IOx application to host on a Cisco device that is running a Cisco IOS XE version older than 16.12? (Choose two.)

Accepted Answer

A)  package_setup.py 
B)  package_config.ini 
C)  application.cfg 
D)  iox.cfg 
E)  package.yaml 
A)  package_setup.py 
B)  package_config.ini 
C)  application.cfg 
D)  iox.cfg 
E)  package.yaml

Question 16

An organization manages a large cloud-deployed application that employs a microservices architecture across multiple data centers. Reports have received about application slowness. The container orchestration logs show that faults have been raised in a variety of containers that caused them to fail and then spin up brand new instances. Which two actions can improve the design of the application to identify the faults? (Choose two.)

Accepted Answer

A)  Automatically pull out the container that fails the most over a time period. 
B)  Implement a tagging methodology that follows the application execution from service to service. 
C)  Add logging on exception and provide immediate notification. 
D)  Do a write to the datastore every time there is an application failure. 
E)  Implement an SNMP logging system with alerts in case a network link is slow. 
A)  Automatically pull out the container that fails the most over a time period. 
B)  Implement a tagging methodology that follows the application execution from service to service. 
C)  Add logging on exception and provide immediate notification. 
D)  Do a write to the datastore every time there is an application failure. 
E)  Implement an SNMP logging system with alerts in case a network link is slow.

Question 17

Refer to the exhibit. The command docker build --tag=friendlyhello . is run to build a docker image from the given Dockerfile, reguirements.txt, and app.py. Then the command docker run -p 4000:80 friendlyhello is executed to run the application. Which URL is entered in the web browser to see the content served by the application?

Accepted Answer

A)  http://127.0.0.1:80 
B)  http://4000:80 
C)  http://localhost:4000 
D)  http://localhost:80 
A)  http://127.0.0.1:80 
B)  http://4000:80 
C)  http://localhost:4000 
D)  http://localhost:80

Question 18

Refer to the exhibit. Many faults have occurred in the ACI environment and a sample of them needs to be examined. Which API call retrieves faults 31 through 45?

Accepted Answer

A)  GET https://apic-ip-address/api/class/faultInfo.json?\order-by=faultinst.severity|desc&page=1&page-size=15 
B)  GET https://apic-ip-address/api/class/faultInfo.json?\order-by=faultinst.severity|desc&page=2&page-size=15 
C)  GET https://apic-ip-address/api/class/faultInfo.json?\order-by=faultinst.severity|desc&page-size=30 
D)  GET https://apic-ip-address/api/class/faultInfo.json?\order-by=faultinst.severity|desc&page=2&page-size=30 
A)  GET https://apic-ip-address/api/class/faultInfo.json?\order-by=faultinst.severity|desc&page=1&page-size=15 
B)  GET https://apic-ip-address/api/class/faultInfo.json?\order-by=faultinst.severity|desc&page=2&page-size=15 
C)  GET https://apic-ip-address/api/class/faultInfo.json?\order-by=faultinst.severity|desc&page-size=30 
D)  GET https://apic-ip-address/api/class/faultInfo.json?\order-by=faultinst.severity|desc&page=2&page-size=30

Question 19

An automated solution is needed to configure VMs in numerous cloud provider environments to connect the environments to an SDWAN. The SDWAN edge VM is provided as an image in each of the relevant clouds and can be given an identity and all required configuration via cloud-init without needing to log into the VM once online. Which configuration management and/or automation tooling is needed for this solution?

Accepted Answer

A)  Ansible 
B)  Ansible and Terraform 
C)  NSO 
D)  Terraform 
E)  Ansible and NSO 
A)  Ansible 
B)  Ansible and Terraform 
C)  NSO 
D)  Terraform 
E)  Ansible and NSO

Question 20

Refer to the exhibit. An Intersight API is being used to query RackUnit resources that have a tag keyword set to "Site". What is the expected output of this command?

Accepted Answer

A)  list of all resources that have a tag with the keyword "Site" 
B)  error message because the Value field was not specified 
C)  error message because the tag filter should be lowercase 
D)  list of all sites that contain RackUnit tagged compute resources 
A)  list of all resources that have a tag with the keyword "Site" 
B)  error message because the Value field was not specified 
C)  error message because the tag filter should be lowercase 
D)  list of all sites that contain RackUnit tagged compute resources

Exam 43: CCDE Design Written

The UCS Python SDK includes modules for Service Profile template creation. Which two UCS Service Profile template types are supported? (Choose two.)

A developer deploys a SQLite database in a Docker container. Single-use secret keys are generated each time a user accesses the database. The keys expire after 24 hours. Where should the keys be stored?

Which two techniques protect against injection attacks? (Choose two.)

Refer to the exhibits which show the documentation associated with the create port object API call in Cisco Firepower Threat Defense, and a cURL command. Which data payload completes the cURL command to run the API call?

What is a capability of the End User Monitoring feature of the AppDynamics platform?

Application sometimes store configuration as constants in the code, which is a violation of strict separation of configuration from code. Where should application configuration be stored?

Refer to the exhibit. This cURL POST request creates an OAuth access token for authentication with FDM API requests. What is the purpose of the file "@token_data" that cURL is handling?

In the three-legged OAuth2 process, after the authorization server presents a form to the resource owner to grant access, what is the next step?

Refer to the exhibit. The information in the exhibit was obtained by using RESTCONF and querying URI /restconf/data/native/ip/route. Which RESTCONF call and which JSON code is used to add a new IP route to a network of 172.30.200.0/24 through the GigabitEthernet2 interface? (Choose two.)

Refer to the exhibit. The presented application consists of a Nginx container and a load balancer service. Which GitLab CI/CD configuration implements the Kubernetes deployment?

Refer to the exhibit. An engineer is configuring Ansible to run playbooks against Cisco IOS XE Software. What should be configured in ansible.cfg as the connection type?

Which RFC5988 (Web Linking) relation type is used in the Link header to control pagination in APIs?

Refer to the exhibit. Which parameter is missing from the JSON response to confirm the API version that is used?

Which two files are needed to create a Cisco IOx application to host on a Cisco device that is running a Cisco IOS XE version older than 16.12? (Choose two.)

Refer to the exhibit. Many faults have occurred in the ACI environment and a sample of them needs to be examined. Which API call retrieves faults 31 through 45?

Refer to the exhibit. An Intersight API is being used to query RackUnit resources that have a tag keyword set to "Site". What is the expected output of this command?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters