Question 1

A developer has completed the implementation of a REST API, but when it is executed, it returns a 401 error message. What must be done on the API to resolve the issue?

Accepted Answer

A)  Access permission to the resource must be granted, before the request. 
B)  Configure new valid credentials. 
C)  The requested API endpoint does not exist, and the request URL must be changed. 
D)  Additional permission must be granted before the request can submitted. 
A)  Access permission to the resource must be granted, before the request. 
B)  Configure new valid credentials. 
C)  The requested API endpoint does not exist, and the request URL must be changed. 
D)  Additional permission must be granted before the request can submitted.

Question 2

Refer to the exhibit. Which key value pair from the ios_ntp Ansible module creates an NTP server peer?

Accepted Answer

A)  state: present 
B)  state: True 
C)  config: present 
D)  config: True 
A)  state: present 
B)  state: True 
C)  config: present 
D)  config: True

Question 3

Which two data encoding techniques are supported by gRPC? (Choose two.)

Accepted Answer

A)  XML 
B)  JSON 
C)  ASCII 
D)  ProtoBuf 
E)  YAML 
A)  XML 
B)  JSON 
C)  ASCII 
D)  ProtoBuf 
E)  YAML

Question 4

A cloud native project is being worked on in which all source code and dependencies are written in Python, Ruby, and/or JavaScnpt. A change in code triggers a notification to the CI/CD tool to run the CI/CD pipeline. Which step should be omitted from the pipeline?

Accepted Answer

A)  Deploy the code to one or more environments, such as staging and/or production. 
B)  Build one of more containers that package up code and all its dependencies. 
C)  Compile code. 
D)  Run automated tests to validate the code. 
A)  Deploy the code to one or more environments, such as staging and/or production. 
B)  Build one of more containers that package up code and all its dependencies. 
C)  Compile code. 
D)  Run automated tests to validate the code.

Question 5

Which tool is used to deploy an IOx application to a group of IOx devices at one time?

Accepted Answer

A)  ioxclient 
B)  IOx local manager 
C)  Fog Network Director 
D)  Kubernetes 
A)  ioxclient 
B)  IOx local manager 
C)  Fog Network Director 
D)  Kubernetes

Question 6

Which two methods are API security best practices? (Choose two.)

Accepted Answer

A)  Use tokens after the identity of a client has been established. 
B)  Use the same operating system throughout the infrastructure. 
C)  Use encryption and signatures to secure data. 
D)  Use basic auth credentials over all internal API interactions. 
E)  Use cloud hosting services to manage security configuration. 
A)  Use tokens after the identity of a client has been established. 
B)  Use the same operating system throughout the infrastructure. 
C)  Use encryption and signatures to secure data. 
D)  Use basic auth credentials over all internal API interactions. 
E)  Use cloud hosting services to manage security configuration.

Question 7

Which statement about microservices architecture is true?

Accepted Answer

A)  Applications are written in a single unit. 
B)  It is a complex application composed of multiple independent parts. 
C)  It is often a challenge to scale individual parts. 
D)  A single faulty service can bring the whole application down. 
A)  Applications are written in a single unit. 
B)  It is a complex application composed of multiple independent parts. 
C)  It is often a challenge to scale individual parts. 
D)  A single faulty service can bring the whole application down.

Question 8

Refer to the exhibit. What is the missing step in deploying a Docker container to IOx?

Accepted Answer

A)  Build the package.yaml file. 
B)  Pull/push the image to the Docker registry. 
C)  Build the package.cert file to sign the app. 
D)  Log in to Device Manager. 
A)  Build the package.yaml file. 
B)  Pull/push the image to the Docker registry. 
C)  Build the package.cert file to sign the app. 
D)  Log in to Device Manager.

Question 9

Which two situations are flagged by software tools designed for dependency checking in continuous integration environments, such as OWASP? (Choose two.)

Accepted Answer

A)  publicly disclosed vulnerabilities related to the included dependencies 
B)  mismatches in coding styles and conventions in the included dependencies 
C)  incompatible licenses in the included dependencies 
D)  test case failures introduced by bugs in the included dependencies 
E)  buffer overflows to occur as the result of a combination of the included dependencies 
A)  publicly disclosed vulnerabilities related to the included dependencies 
B)  mismatches in coding styles and conventions in the included dependencies 
C)  incompatible licenses in the included dependencies 
D)  test case failures introduced by bugs in the included dependencies 
E)  buffer overflows to occur as the result of a combination of the included dependencies

Question 10

An Etag header is included in the HTTP response for an API resource. What are two benefits of using the value of the Etag for future interactions involving the same API resource? (Choose two.)

Accepted Answer

A)  caching and optimization of response payloads 
B)  creating conditional requests 
C)  categorizing and comparing this API resource with others 
D)  checking the integrity of the resource 
E)  requesting the list of operations authorized for this resource 
A)  caching and optimization of response payloads 
B)  creating conditional requests 
C)  categorizing and comparing this API resource with others 
D)  checking the integrity of the resource 
E)  requesting the list of operations authorized for this resource

Question 11

Refer to the exhibit. The Ansible playbook is using the netconf_module to configure an interface using a YANG model. As part of this workflow, which YANG models augment the interface?

Accepted Answer

A)  ietf-interfaces and ietf-ip ietf-interfaces and ietf-ip 
B)  iana-if-type and ietf-interfaces iana-if-type 
C)  ietf-ip and openconfig-interface openconfig-interface 
D)  ietf-ip and iana-if-type 
A)  ietf-interfaces and ietf-ip ietf-interfaces and ietf-ip 
B)  iana-if-type and ietf-interfaces iana-if-type 
C)  ietf-ip and openconfig-interface openconfig-interface 
D)  ietf-ip and iana-if-type

Question 12

Which two types of storage are supported for app hosting on a Cisco Catalyst 9000 Series Switch? (Choose two.)

Accepted Answer

A)  external USB storage 
B)  internal SSD 
C)  CD-ROM 
D)  SD-card 
E)  bootflash 
A)  external USB storage 
B)  internal SSD 
C)  CD-ROM 
D)  SD-card 
E)  bootflash

Question 13

Which two gRPC modes of model-driven telemetry are supported on Cisco IOS XE Software? (Choose two.)

Accepted Answer

A)  dial-in 
B)  dial-out 
C)  call-in 
D)  call-out 
E)  passive 
A)  dial-in 
B)  dial-out 
C)  call-in 
D)  call-out 
E)  passive

Question 14

Refer to the exhibit. Which snippet creates a Webex Teams space and adds the users in the variable user_list to that space?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 15

A bot has been created to respond to alarm messages. A developer is now creating a Webhook to allow the bot to respond to messages. Which format allows the Webhook to respond to messages for the bot within Webex?

Accepted Answer

A)  GET /messages?personId=me&roomId=NETWORK_STATUS Authorization: Bearer THE_BOTS_ACCESS_TOKEN 
B)  GET /messages?mentionedPeople=me&roomId=NETWORK_STATUS 
C)  GET /messages?mentionedBot=me&roomId=NETWORK_STATUS 
D)  GET /messages?botId=me&roomId=NETWORK_STATUS 
A)  GET /messages?personId=me&roomId=NETWORK_STATUS Authorization: Bearer THE_BOTS_ACCESS_TOKEN 
B)  GET /messages?mentionedPeople=me&roomId=NETWORK_STATUS 
C)  GET /messages?mentionedBot=me&roomId=NETWORK_STATUS 
D)  GET /messages?botId=me&roomId=NETWORK_STATUS

Question 16

Refer to the exhibit. Which key value pair from the ios_ntp Ansible module removes the NTP server peer?

Accepted Answer

A)  state: absent 
B)  state: False 
C)  config: absent 
D)  config: False 
A)  state: absent 
B)  state: False 
C)  config: absent 
D)  config: False

Question 17

Which OAuth mechanism enables clients to continue to have an active access token without further interaction from the user?

Accepted Answer

A)  refresh grant 
B)  JWT 
C)  password grant 
D)  preshared key 
A)  refresh grant 
B)  JWT 
C)  password grant 
D)  preshared key

Question 18

Why is end-to-end encryption deployed when exposing sensitive data through APIs?

Accepted Answer

A)  Data transfers are untraceable from source to destination. 
B)  Data cannot be read or modified other than by the true source and destination. 
C)  Server-side encryption enables the destination to control data protection. 
D)  Traffic is encrypted and decrypted at every hop in the network path. 
A)  Data transfers are untraceable from source to destination. 
B)  Data cannot be read or modified other than by the true source and destination. 
C)  Server-side encryption enables the destination to control data protection. 
D)  Traffic is encrypted and decrypted at every hop in the network path.

Question 19

Refer to the exhibit. Which code snippet completes this code to handle API rate-limit?

Accepted Answer

A)  response.status_code == 429 
B)  response.status_code != 408 
C)  response.status != 408 
D)  response.status_code != 429 
A)  response.status_code == 429 
B)  response.status_code != 408 
C)  response.status != 408 
D)  response.status_code != 429

Question 20

A developer has just completed the configuration of an API that connects sensitive internal systems. Based on company policies, the security of the data is a high priority. Which approach must be taken to secure API keys and passwords?

Accepted Answer

A)  Embed them directly in the code. 
B)  Store them in a hidden file. 
C)  Store them inside the source tree of the application. 
D)  Change them periodically. 
A)  Embed them directly in the code. 
B)  Store them in a hidden file. 
C)  Store them inside the source tree of the application. 
D)  Change them periodically.

Exam 43: CCDE Design Written

A developer has completed the implementation of a REST API, but when it is executed, it returns a 401 error message. What must be done on the API to resolve the issue?

Refer to the exhibit. Which key value pair from the ios_ntp Ansible module creates an NTP server peer?

Which two data encoding techniques are supported by gRPC? (Choose two.)

A cloud native project is being worked on in which all source code and dependencies are written in Python, Ruby, and/or JavaScnpt. A change in code triggers a notification to the CI/CD tool to run the CI/CD pipeline. Which step should be omitted from the pipeline?

Which tool is used to deploy an IOx application to a group of IOx devices at one time?

Which two methods are API security best practices? (Choose two.)

Which statement about microservices architecture is true?

Refer to the exhibit. What is the missing step in deploying a Docker container to IOx?

Which two situations are flagged by software tools designed for dependency checking in continuous integration environments, such as OWASP? (Choose two.)

An Etag header is included in the HTTP response for an API resource. What are two benefits of using the value of the Etag for future interactions involving the same API resource? (Choose two.)

Refer to the exhibit. The Ansible playbook is using the netconf_module to configure an interface using a YANG model. As part of this workflow, which YANG models augment the interface?

Which two types of storage are supported for app hosting on a Cisco Catalyst 9000 Series Switch? (Choose two.)

Which two gRPC modes of model-driven telemetry are supported on Cisco IOS XE Software? (Choose two.)

Refer to the exhibit. Which snippet creates a Webex Teams space and adds the users in the variable user_list to that space?

A bot has been created to respond to alarm messages. A developer is now creating a Webhook to allow the bot to respond to messages. Which format allows the Webhook to respond to messages for the bot within Webex?

Refer to the exhibit. Which key value pair from the ios_ntp Ansible module removes the NTP server peer?

Which OAuth mechanism enables clients to continue to have an active access token without further interaction from the user?

Why is end-to-end encryption deployed when exposing sensitive data through APIs?

Refer to the exhibit. Which code snippet completes this code to handle API rate-limit?

A developer has just completed the configuration of an API that connects sensitive internal systems. Based on company policies, the security of the data is a high priority. Which approach must be taken to secure API keys and passwords?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters