Refer to the exhibit. The application follows a containerized microservices architecture that has one container per microservice. The microservices communicate with each other by using REST APIs. The double-headed arrows in the diagram display chains of synchronous HTTP calls needed for a single user request.

Which action ensures the resilience of the application in the scope of a single user request?

Implement retries with exponential backoff during HTTP API calls.
Set up multiple instances of each microservice in active/active mode by using the Orchestrator.
Redesign the application to be separated into these three layers: Presentation, API, and Data.
Create two virtual machines that each host an instance of the application and set up a cluster.

Answer(s): A

Show Answer Next Question

QUESTION: 62

DRAG DROP (Drag and Drop is not supported)
Drag and drop the steps on the left into the order on the right for an end-user to access an OAuth2 protectedresource using the 'Authorization Code Grant' flow.

Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Show Answer Next Question

QUESTION: 63

In the three-legged OAuth2 authorization workflow, which entity grants access to a protected resource?

resource owner
client
resource server
authorization server

Answer(s): A

Reference:

https://developer.orange.com/tech_guide/3-legged-oauth/

Show Answer Next Question

QUESTION: 64

What are two steps in the OAuth2 protocol flow? (Choose two.)

The user is authenticated by the authorization server and granted an access token.
The user’s original credentials are validated by the resource server and authorization is granted.
The user indirectly requests authorization through the authorization server.
The user requests an access token by authentication and authorization grant presentation.
The user requests the protected resource from the resource server using the original credentials.

Answer(s): C,E

Reference:

https://www.digitalocean.com/community/tutorials/an-introduction-to-oauth-2

Show Answer Next Question

Download PDF Next Page

Viewing page 14 of 78
Viewing questions 66 - 70 out of 507 questions

Post your Comments and Discuss Cisco 350-901 exam prep with other Community members:

Comments:

Name:

350-901 Exam Discussions & Posts
350-901 AI Verifications

Alex on: March 02, 2025
Great material
UNITED KINGDOM

flashcardfanatic on: June 04, 2026
Exam dumps were a bit off compared to the real exam questions which made this exam very hard to tackle.
France

DevOpsRach on: June 18, 2026
This exam was really stressful. The practice questions here were a lifesaver.
Australia

twojobsnosleep on: June 29, 2026
At first I didn't feel very confident about the exam but spending time with the practice questions helped a lot. This website guided me through what to expect so I felt more prepared on test day.
Rwanda

katesecplus on: August 10, 2026
At first I felt not confident with this exam but practice questions helped me learn slowly.
South Korea

KuberneteKid on: June 26, 2026
This exam covered more than I was expecting honestly and it kinda threw me off. The practice questions on this website were useful for sure though they helped a lot in the prep stage.
Kenya

SplunkSam on: June 28, 2026
I felt like I was making slow progress but this website kept me going. After reviewing the questions a few times I passed the exam in the end.
India

certgrind2025 on: June 06, 2026
Juggling work and studying was a challenge but this website helped me tackle the material bit by bit during lunch breaks. Finally passed the exam which felt pretty good given my packed schedule.
Saudi Arabia

certorcry on: June 03, 2026
teh AI Assistant and braindumps were the only reason I made it through this exam. Very hard and I wasn't sure I'd pass.
Kenya

ExamWarrior on: April 27, 2026
Spent hours on the braindumps because this exam was very hard. Underestimated it at first but the real exam quetions needed extra practice.
Italy

CertHunter on: June 28, 2026
Between meetings and late nights I managed to squeeze in some exam prep on this site. It took time but I eventually passed the exam.
Ireland

NetwrkKing on: June 01, 2026
It felt like I was making slow progress during my prep but the review time was super important. Passed in the end so happy with that result.
United Kingdom

CertifiedFinally on: June 25, 2026
This exam threw a lot more at me than I was ready for. The AI assistant on this site actually helped when the material felt endless.
Mexico

netgurusteve on: June 08, 2026
Prep went slow but practice questions were solid. Took time reviewing. Passed the exam finally.
Latvia

justanothertechguy on: July 30, 2026
This exam was tougher than I thought but still okay after checking out some practice questions here.
Belgium

PaperCCNA on: May 05, 2026
Juggling work and short study sessions was rough but this website's exam prep really helped me out. I'm just relieved I finished the exam feeling confident.
Canada

barelypassedlol on: June 11, 2026
Took two attempts and the brain dumps were essential for barely passing this challenging exam. The stress was real but the real exam questions helped a lot.
Norway

koria on: August 03, 2026
good helping dump quetions
Addis Ababa, Ethiopia

rachelops on: June 26, 2026
Juggling work and short study sessions was tough but worth it for this cert. Feeling huge relief now that it's done with help from practice questions here.
United States

t1_support_guy on: June 05, 2026
This exam was very hard and I barely made it through after using brain dumps. The stress was real but those brain dumps kept me from completely losing it.
Japan

GCPengineerT on: July 05, 2026
Real exam questions were tough and caught me off guard despite using brain dumps. This exam was very hard even with the AI Assistant's help.
Brazil

secopsj on: July 17, 2026
This exam was very hard and the exam dumps were a last resort that finally helped me understand the real exam questions.
Ukraine

CloudGuyMike on: August 03, 2026
After long days at work I only had time for short study sessions here and there. Luckily the relevant questions made passing the exam feel like such a relief.
South Korea

DataCenterDan on: June 27, 2026
Juggling work and short study sessions was no joke. Glad to say those practice questions helped a lot and passing the exam feels like a big relief.
Belgium

ITproSarah on: May 13, 2026
This exam threw in a few surprise topics I didn't expect. The AI assistant on this site really helped fill in the gaps though so it was handy.
China

homelabhero on: June 30, 2026
This exam was hard but the prep questions here really helped me pass.
Pakistan

PassedOnThird on: July 02, 2026
Managed to squeeze in study time for this exam during lunch breaks. Happy to say I passed thanks to relevant questions and the AI assistant on this site.
Qatar

CertifiedFinally on: July 29, 2026
It took me a while to get through the prep because of my busy schedule. The practice questions really helped clarify tough concepts during review. Happy I passed eventually even if it felt slow at first.
Finland

OracleCertV on: June 14, 2026
I wasn't feeling too confident at first but the practice questions here helped a lot. The more I worked with them the better I understood what to expect for this exam.
South Korea

SplunkSam on: August 02, 2026
At first not confident but practice questions on this website helped me get better understanding.
Indonesia

careerchangerc on: July 17, 2026
This exam was tough but if you focus on relevant questions it's definitely doable.
Belgium

hamidcertguy on: June 26, 2026
That exam was crazy stressful. Glad I used this site's prep materials.
Switzerland

PaperCCNA on: June 08, 2026
Progress was slow at first but the practice questions here helped. I took my time to review everything properly. Passed the exam in the end so it worked out well for me.
Malaysia

PassedOnThird on: June 24, 2026
At first I wasn't sure about passing this cert but the practice questions helped a lot.
Taiwan

liamsecops on: June 30, 2026
Went through the practice questions on this website helped a lot. They covered relevant questions and I learned plenty along the way. Passed with a 94% mark. I am happy.
Denmark

jamestechuk on: July 15, 2026
Barely scraped through this exam by relying heavily on brain dumps and real exam questions. The challenging exam seemed endless and left me completely drained.
Ukraine

VMwareVince on: July 06, 2026
Man this exam was stressing me out. This website's practice questions really saved me.
Nigeria

RedHatRick on: July 25, 2026
This exam was kinda stressful but the practice questions kept me calm. It turned out okay in the end.
Sweden

sidehustlesysadmin on: May 13, 2026
After long days at work I could only study in short bursts. It was a relief to finally pass the exam thanks to the practice questions here.
Germany

alwayslearninga on: May 11, 2026
Barely scraped by this exam after underestimating it and grinding through what felt like endless braindumps. Real exam questions were very hard so a second attempt was needed.
Denmark

ZeroTrustZ on: June 28, 2026
I wasn't feeling all that confident at first but the practice questions on this website made a huge difference. They helped me learn what was relevant and focus my study time better.
Saudi Arabia

fatimanetsec on: June 14, 2026
This exam was stressing me out. The prep material on this website definitely helped calm my nerves.
Malaysia

anya_cloudarch on: June 03, 2026
Thought I wouldn't pass this exm but the braindumps and the AI Assistant were helpful enough to get through. The challenging exam questions were a wake-up call for needed prep.
Kuwait

CertifiedFinally on: July 23, 2026
I crammed with the practice questions here to save time and money and got through the exam slowly but surely.
Pakistan

CiscoFanJ on: June 27, 2026
At first, I wasn't feeling too confident about the exam but using this website helped a lot. The practice questions were on point and really mirrored what I needed to know.
Mexico

LinuxPlusLen on: July 05, 2026
I wasn't feeling confident about the exam at first. The practice questions here helped me learn and understand what I needed.
Taiwan

Imad Hamdan on: July 27, 2026
Question #8: AI shows "A" is the correct answer while you have "B" Question #10: AI shows "D" is the correct answer, and you have "A"
Charlotte, United States

p1ngpro on: June 21, 2026
Real exam questions caught me off guard and made this exam very hard but the braindumps were a rare help.
Nigeria

dmitrilinuxpro on: June 30, 2026
This exam was tougher than I thought but with the prep from this site it felt manageable.
Spain

jhernandezit on: July 30, 2026
This site saved me lot of time and money by cramming useful material which helped passing the exam slowly but surely.
Japan

AI Explanation - verified by User7882 on: July 16, 2026
Question 1:

The question asks which Azure support plans allow you to open new support requests.

Key concept:

- Basic plan: mainly for billing/subscription support; does not include technical support or the ability to file new technical incidents. - Developer, Standard, Professional Direct, Premier (paid plans): include technical support and allow you to open new support requests.

Therefore, the correct choice is the plan(s) other than Basic (i.e., Developer, Standard, Professional Direct, Premier). If the provided key lists only one option as correct (A), it may be incomplete or misleading—the official plans page shows that Basic does not meet the requirement, while the paid plans do. See: https://azure.microsoft.com/en-us/support/plans/

Noida, India

AI Explanation - verified by User3219 on: August 13, 2026
Question 149:
Correct answer: D — User activity logs
User activity logs record authentication events, including:

Failed login attempts

The account being targeted

The source user or system

Time and frequency of attempts

Security staff can review or alert on repeated attempts to access administrator accounts, which may indicate credential guessing or an insider threat.
Why the others are less appropriate:

Two-factor authentication: Helps prevent unauthorized access, but does not primarily detect the employee’s attempts.

Firewall: Controls network traffic; it generally does not monitor individual login attempts.

Intrusion prevention system (IPS): Can detect certain network attacks, but this scenario is best addressed through authentication and audit logging.

The key clue is “detect” and the focus on attempted logins. Auditing and reviewing user activity logs is the most direct control.
Ruckersville, United States

AI Explanation - verified by User1610 on: July 19, 2026
Question 70:
I can’t see the hotspot image for Question 70. Please paste the text of the statements (the Yes/No items) or describe them, and I’ll walk through which are true and why.
In the meantime, quick tips for Azure hotspot questions:

Each statement is evaluated as True (Yes) or False (No) independently.

Key Azure facts to recall:

- A resource can exist in only one resource group. - A resource group is a management container for resources and can include resources from multiple regions. - Billing/scoping is typically at the subscription level, not constrained by a single resource group. - Resource groups contain metadata about contained resources, not the resources themselves.
Share the actual statements, and I’ll apply these concepts to determine the correct Yes/No for each.
Gurugram, India

AI Explanation - verified by User9569 on: August 02, 2026
Question 3:

Correct answer: Power BI dataset

Explanation:

The scenario says the data model already contains several measures and you want to create a report from the existing data with minimal development. Reusing a published Power BI dataset lets you inherit the existing measures and data model, so you don’t have to recreate them.

How to do it: In Power BI Desktop, use the connector Power BI datasets (Get Data > Power BI datasets) and connect to the existing dataset, then build visuals using the pre-defined measures.

Why the other options are less suitable:

- SharePoint folder would require importing the Excel data again and rebuilding measures. - Power BI dataflows are for data ingestion pipelines, not for leveraging an existing report’s data model directly. - Excel workbook would reimport data and likely require re-creating the model and measures.
Kuala Lumpur, Malaysia

AI Explanation - verified by User3779 on: July 24, 2026
Question 121:

The correct answer: C. Tokenization

Why:

- Tokenization replaces sensitive data (like credit card numbers) with a non-value token. The actual data lives in a secure vault, not in the database, so a breach of the database won’t expose real card data. - This approach is widely used for payment card data and reduces exposure risk and PCI scope because the tokens themselves are meaningless outside the tokenization context.

Why the others are weaker:

- Hashing: irreversible, so you can’t retrieve the actual card number to process a transaction. - Obfuscation: typically not secure enough; can often be reversed. - Masking: only hides data in display; the actual data remains stored elsewhere and vulnerable.
Vila Velha, Brazil

AI Explanation - verified by agrim.moudgil123 on: August 06, 2026
Question 1:
Question 1’s correct answers are B and D:

Enable the owner dimension

- The Owner inventory dimension identifies who owns the inventory—your company or the vendor. - This is required to distinguish company-owned inventory from consignment inventory for the same item.

Assign a standard costing inventory model

- Consignment inventory scenarios require the item to use an inventory model that supports the required ownership and cost treatment. In this question, that is standard cost.
Why the others are incorrect:

Batch dimension tracks batches or lots, such as expiration or production batches. It does not identify inventory ownership.

Moving average is a costing method, but it is not the required choice for this consignment configuration.

So, the answer key’s B and D is consistent with the expected Dynamics 365 SCM configuration.
Bengaluru, India

AI Explanation - verified by sygulska.justyna on: August 07, 2026
Question 13:
Correct answer: manage a Teams Rooms device
The Microsoft Teams admin center is used to manage Teams-specific settings and devices, including Teams Rooms on Windows and Android. Administrators can view device health, configure settings, apply policies, and manage updates.
Why the other options are incorrect:

Assign a Teams license to a user — Licenses are assigned through the Microsoft 365 admin center, Microsoft Entra ID, or PowerShell.

Deploy the Teams client — The Teams admin center manages Teams policies and apps, but it is not the primary tool for deploying the desktop client.

Prevent users from creating teams — Team creation depends on controlling the creation of Microsoft 365 groups, generally configured through Microsoft Entra ID and PowerShell rather than directly in the Teams admin center.

So the key distinction is: Teams admin center = Teams configuration, policies, and Teams device management, not general licensing or client deployment.
Poznan, Poland

AI Explanation - verified by User9769 on: August 06, 2026
Question 13:
Correct answer: A — Multitenancy
Multitenancy is a cloud architecture in which a single application or service supports multiple groups of users—called tenants—while keeping their data and access logically separated. In this scenario, the company hosts one cloud application for both internal users and third-party users.
Why the others are less suitable:

VPC: A logically isolated virtual network in a cloud environment; it describes networking, not shared application access.

NFV: Replaces dedicated network appliances with virtualized network functions.

SaaS: A cloud service model in which users consume an application without managing its infrastructure. It could describe how the application is delivered, but the question emphasizes serving multiple user groups, which points to multitenancy.

Morrow, United States

AI Explanation - verified by User6887 on: July 21, 2026
Question 24:
Question 24 asks how to get a global unicast IPv6 address that is derived from the interface’s MAC address.

Correct answer: enable SLAAC on an interface (C)

- Why: SLAAC allows a device to autoconfigure a global unicast address using the network prefix learned via Router Advertisements and an interface identifier derived from the MAC (the EUI-64 process). When SLAAC is enabled, the MAC-based EUI-64 identifier can be combined with the prefix to form the global address.

Why the other options are not correct:

- explicitly assign a link-local address: link-local (fe80::/64) is not global/routable. - disable the EUI-64 bit process: disabling EUI-64 would prevent deriving the MAC-based interface ID. - configure a stateful DHCPv6 server: DHCPv6 can assign addresses, but addresses derived from the MAC via EUI-64 are part of SLAAC, not DHCPv6-native address assignment.
In short, enabling SLAAC on the interface lets the device automatically create a global IPv6 address using EUI-64 from the MAC plus the learned prefix.
Thiruvananthapuram, India

AI Explanation - verified by User4569 on: July 31, 2026
Question 7:
Question 7 asks how to confirm integrity of a hashed message.

Correct answer: D — use the same hashing algorithm as the sender's to create a numerical representation of the file.

Why:

Integrity is verified by recomputing the hash on the received data and comparing it to the sender’s hash. This must use the same hash function; if you use a different algorithm, the digests won’t match even if the data is intact.

The hash output is a fixed-length digest (a numerical representation). Whether you call it a “binary image” or a “numerical representation,” the key is that you generate the same type of digest with the same algorithm and compare them.

Incorrect options:

A: same algorithm but the result is described as a binary image instead of a digest; you still compare the digest, but the phrasing is less precise.

B/C: using a different algorithm would produce a different digest, causing false mismatch or failure to verify integrity.

In short: recompute the hash with the same algorithm and compare the resulting digest to the one sent.
Sarajevo, Bosnia And Herzegovina

AI Explanation - verified by User6075 on: August 04, 2026
Question 36:
Answer: A
Reasoning:

In Microsoft Teams Phone System, a single Auto Attendant can handle multiple time-based greetings by using separate schedules for office hours, after hours, weekends, and holidays.

You can configure one Auto Attendant with four distinct greetings mapped to:

- Office hours (Mon–Fri 09:00–17:00) - Outside office hours (Mon–Fri 17:00–09:00) - Weekends (Sat–Sun, all day) - National holidays (Holiday schedule)
How to configure:

Open the Teams admin center > Voice > Auto attendants, edit or create an Auto Attendant.

Under Time-based routing, define four rules:

1) Weekdays 09:00–17:00 ? Greeting: Office hours 2) Weekdays 17:00–09:00 ? Greeting: Outside office hours 3) Weekends (Sat–Sun 00:00–23:59) ? Greeting: Weekend 4) Holiday schedule ? Greeting: Holiday

Create a Holiday schedule with the relevant dates (e.g., Easter, Christmas) and assign the Holiday greeting.

Save the configuration.

Note:

If your environment cannot separate weekend from after-hours within a single Auto Attendant, you might technically need more than one Auto Attendant.

Mumbai, India

AI Explanation - verified by User7851 on: August 05, 2026
Question 8:
Correct answer: A — the Microsoft Defender portal
To review the impact of a phishing incident, use the Microsoft Defender portal (security.microsoft.com). It provides security investigation and threat-response tools, including:

Incidents & alerts — see how the phishing activity was detected, correlated, and investigated.

Threat Explorer — search for the malicious messages, recipients, URLs, attachments, and campaign activity.

Email and collaboration reports — assess how many users or messages were affected.

Remediation details — verify whether messages were quarantined, removed, or otherwise contained.

The other portals are not the best choice:

Microsoft 365 admin center — general tenant administration.

Microsoft Entra admin center — identity and access management.

Exchange admin center — mail-flow and Exchange configuration, rather than full phishing-incident investigation.

The key exam distinction is that security incidents and phishing impact analysis belong in Microsoft Defender, not the general administration portals.
Barrie, Canada

AI Explanation - verified by bmccloskey on: July 27, 2026
Question 17:
Question 17 asks which conditions will prevent an OSPF adjacency from reaching the Full state. The three correct options are A, B, and D.

A) MTU mismatch: OSPF neighbors must exchange Hello packets with a compatible MTU. If MTUs differ, the neighbor conversation fails and the adjacency cannot become Full.

B) Incorrect subnet mask: Routers must be in the same IP subnet on the connected link to form a neighbor relationship. A subnet mismatch prevents Hello packets from being considered valid on the same network.

D) Area ID not the same: Neighbors must share the same Area ID. A mismatch stops adjacency from forming beyond the 2-Way state.

Why the others aren’t correct (in this context):

E) Different metric set on each end of the link: Cost differences do not prevent OSPF adjacency; they affect routing decisions, not neighbor formation.

F) Router ID not defined: OSPF can auto-choose a router ID; an undefined ID is not a prerequisite for adjacency to reach Full.

C is sometimes a consideration (if the interface isn’t running OSPF at all), but the official key lists A, B, D as the three factors.
Hilo, United States

AI Explanation - verified by User5385 on: July 15, 2026
Question 6:
Question 6 asks which criteria you can sort Knowledge Base search results by.
Correct: A, C, E — meaning you can sort by:

Most recent update: orders results by the date the article was last updated (newest first).

Relevancy: orders results by how closely articles match your search terms.

Number of views: orders results by how often an article has been viewed (popularity).

Why the others aren’t correct:

Popularity is not a standard separate sort option in Knowledge Base (the related concept is typically covered by “Number of views”).

Manager assignment has no bearing on how Knowledge Base results are ranked.

In short, when you search in the Knowledge Base, you can choose to sort by the latest updates, how relevant the articles are to your query, or how many views an article has.
Lucknow, India

AI Explanation - verified by Poornachander1995 on: July 30, 2026
Question 18:
Question 18 asks when to deploy the Splunk_TA_ForIndexes.spl add-on to indexers in an ES deployment.

Correct answer: C) After installing ES on the search head(s) and running the distributed configuration management tool.

Why:

ES requires the Splunk_TA_ForIndexes.spl add-on on indexers to apply index-time configurations. It should be deployed via the distributed configuration management (DCM) flow after ES is installed on the search heads, so the indexers receive the proper configuration in a controlled, versioned bundle.

Why the other options are not correct:

A) Deploying when adding apps to the deployment server isn’t the ES-specific order; it bypasses the ES-instantiated workflow.

B) Installing Splunk_TA_ForIndexes.spl first isn’t the recommended order; ES needs to be installed on the search heads first.

D) It isn’t limited to indexer cluster sites or cluster master commands; the standard flow uses DCM to push the TA to indexers in general.

Takeaway: install ES on the search heads, run DCM to push configurations, then deploy Splunk_TA_ForIndexes.spl to indexers to complete the ES indexing setup.
Bengaluru, India

AI Explanation - verified by User8963 on: July 26, 2026
Question 13:
Question 13 asks which are the key architecture domains.

The standard Enterprise Architecture domains are: Business, Data, Application, Technology (BDAT).

Option analysis:

A: Business, strategy, application and technology — includes business and application/tech but uses “strategy” instead of data.

B: Zachman, TOGAF, Cobit, and Heath architectures — names frameworks, not domains.

C: Business, data, infrastructure and technology — has business, data, and technology; lacks a distinct application domain (uses “infrastructure” instead).

D: Process, database, software and technology — covers data (database), application (software), and technology, but omits business.

Notes:

The four BDAT domains (business, data, application, technology) is the conventional model you should study.

None of the options perfectly lists all four BDAT domains. The closest are C (if you map infrastructure to technology) and D (data/application/technology but no business).

The answer key here (D) seems questionable; the core concept to know is BDAT.
Nuenen, The Netherlands

AI Explanation - verified by jennifer2030203 on: July 27, 2026
Question 64:
Question 64: What should the BA use to manage metadata dependencies across features being developed in parallel to prevent overwriting before the release?
Answer: Version control
Why:

Version control provides a single source of truth for metadata changes and tracks every modification.

It supports branching and merging, so each feature can be developed in isolation and later merged without overwriting others.

It allows diffs and conflict resolution, making it easier to manage dependencies across features and ensure a stable release.

Why not the others:

Setup Audit Trail: only logs who/change when something happened; it doesn’t prevent overwriting or manage cross-feature dependencies.

Change Sets: used to deploy changes between orgs, not to coordinate parallel development or prevent conflicts across ongoing sprints.

Roslindale, United States

AI Explanation - verified by sivatheanalyst007 on: July 27, 2026
Question 17:
Here’s why Question 17’s answer is E.

Correct answer: only new data added to the eventhouse (option E).

Why: When you enable OneLake availability for the eventhouse, OneLake starts syncing data going forward. It does not automatically backfill or copy over data that already exists in the eventhouse before the enablement.

What that means in practice: Any data added to the eventhouse after you enable OneLake will appear in OneLake (and be visible from OneLake file explorer). Pre-existing data in the eventhouse stays there unless you perform a separate backfill/copy operation outside the standard OneLake enablement.

How to verify: add a small new dataset to the eventhouse after enabling OneLake availability, then check OneLake to confirm the new dataset appears.

Summary: Enabling OneLake availability is incremental for new data; it won’t copy historical data by default.
Singapore, Singapore

AI Explanation - verified by nanrany on: July 29, 2026
Question 176:
The correct answer is AWS Application Discovery Service.

Why: ADS is designed to collect information about on-premises environments to plan migrations. It inventories details like hostname, IP address, MAC address, OS, hardware, and installed software, plus dependency mappings. This data helps you understand your current environment before moving to AWS.

How it differs from the other options:

- AWS DataSync focuses on transferring data between on-prem and AWS, not providing a network/inventory view. - AWS Application Migration Service (MGN) helps migrate workloads but isn’t primarily used for discovering on-prem inventory. - AWS Database Migration Service moves databases, not general host information.

Practical use: Install the ADS agent on on-prem hosts to collect data, then view the inventory in Migration Hub to inform migration planning and sequencing.

Busan, South Korea

AI Explanation - verified by User8587 on: August 10, 2026
Question 14:
Question 14: Yes — answer A is correct.
Synchronizing the on-premises Active Directory accounts to Azure Active Directory (now Microsoft Entra ID) helps minimize disruption when resources move to Azure.
Benefits include:

Users retain their existing usernames and passwords.

Existing accounts can be used to access Azure-based resources.

Administrators avoid manually recreating thousands of accounts.

The transition is less disruptive before the on-premises data center is retired.

This is typically implemented with Microsoft Entra Connect, which synchronizes identities from on-premises Active Directory to Microsoft Entra ID. Depending on the authentication configuration, users may also continue using their on-premises passwords for cloud sign-in.
Cape Town, South Africa

AI Explanation - verified by nanrany on: July 29, 2026
Question 269:
For Question 269, the correct answer is C: Use Amazon CloudFront with the EC2 instances configured as the source.
Reasoning:

Goal: serving a static website globally with minimal latency.

Why C works: CloudFront is a Content Delivery Network (CDN) that caches content at many edge locations around the world. When users request the site, CloudFront serves cached copies from the nearest edge location, greatly reducing latency. It also reduces load on your EC2 origin by handling many requests at the edge.

Why the other options aren’t as good:

- A: “Use EC2 instances in multiple edge locations” isn’t practical because EC2 isn’t typically deployed directly at edge locations; there’s no built-in caching across those locations like a CDN provides. - B: “Same Availability Zone but in different Regions” is illogical—an Availability Zone belongs to a single region; you can’t have the same AZ across regions. - D: “Same Availability Zone but in different AWS accounts” still provides no latency or scalability benefits.
In short, using CloudFront with EC2 as the origin is the standard, scalable approach to minimize global latency for a static site.
Busan, South Korea

AI Explanation - verified by nanrany on: July 29, 2026
Question 220:
Answer: C — Amazon Cognito
Reason:

Amazon Cognito is designed for customer-facing apps to handle user sign-up, sign-in, and access control, and it can federate identities from social providers (Facebook, Google, etc.) or enterprise IdPs via SAML/OpenID Connect.

You can configure a Cognito User Pool and connect social identity providers, then use tokens (JWT) to authorize backend API calls.

Why the others are not suitable here:

AWS Directory Service is for connecting your AWS apps to an existing directory (like Active Directory) for enterprise users, not social login for customer apps.

AWS IAM is for managing access to AWS resources, not end-user authentication for your website.

AWS IAM Identity Center (AWS SSO) provides SSO for AWS accounts and enterprise apps, not typical social logins for consumer-facing websites.

Busan, South Korea

AI Explanation - verified by User5943 on: August 13, 2026
Question 5:
Answer: No.
Azure virtual machines are an Infrastructure as a Service (IaaS) solution, not Platform as a Service (PaaS).

IaaS: You deploy and manage virtual machines, operating systems, disks, and networking. Azure manages the physical datacenter and host infrastructure.

PaaS: Azure manages the operating system and runtime so you can focus on deploying applications, such as with Azure App Service or Azure Functions.

SaaS: You consume a complete, provider-managed application.

Because the requirement is to deploy Azure VMs, PaaS does not meet the goal. The answer key’s B — No is correct.
Auckland, New Zealand

AI Explanation - verified by User1790 on: August 06, 2026
Question 1:
Correct answer: C — Databricks web application
In the classic Databricks architecture:

Control plane: Managed by Databricks and contains the Databricks web application, workspace services, cluster management, and job orchestration.

Data plane: Runs in your cloud account and contains compute resources such as:

- Driver node - Worker nodes - Data processing operations
The other options are not completely hosted in the control plane:

Worker node: Data plane compute.

Driver node: Data plane compute.

JDBC data source: Usually an external data system.

Databricks Filesystem (DBFS): Provides storage access and is backed by cloud object storage rather than being entirely part of the control plane.

Therefore, the web application is the best answer.
Pune, India

AI Explanation - verified by User8155 on: July 23, 2026
Question 2:
Skupmy sie na trybie SERIALIZABLE w pytaniu 2.

Co to znaczy: transakcje zachowuja sie tak, jakby byly wykonywane jeden po drugim. Dzieki temu nie ma brudnych odczytów, niepowtarzalnych odczytów ani phantom reads.

Implementacja: PostgreSQL uzywa SSI (Serializable Snapshot Isolation). W praktyce oznacza to, ze jesli wykryje konflikt miedzy transakcjami, jedna z nich zostanie zakonczona bledem “serialization failure” i trzeba ja ponowic.

Przyklad (phantom read i serializowalnosc):

Zalózmy tabele orders(customer_id int, amount int).

Transakcja T1:

- BEGIN; - SELECT COUNT(*) FROM orders WHERE customer_id = 42; - -> powiedzmy zwraca 5.

Transakcja T2, równoczesnie:

- BEGIN; - INSERT INTO orders (customer_id, amount) VALUES (42, 100); - COMMIT;

T1 ponownie wykonuje to zapytanie:

- SELECT COUNT(*) FROM orders WHERE customer_id = 42; - W trybie READ COMMITTED widzialoby 6. - W trybie SERIALIZABLE system stara sie utrzymac wynik zgodny z jakims czystym porzadkiem serialnym; jesli realizacja prowadzi do niezgodnosci, jedna transakcja zostanie zakonczona bledem serialization_failure, a T1 (lub T2) moze byc ponownie uruchomiona.
Wiecej: w PostgreSQL taki blad ma zazwyczaj komunikat “could not serialize access due to read/write dependencies” (SQLSTATE 40001) i wymaga ponownego uruchomienia transakcji.
Warsaw, Poland

AI Explanation - verified by User1410 on: August 10, 2026
Question 1:
Correct sequence:

Define Power Platform DLP policies

Add custom prompt modifications

Conduct adversarial testing

Why this order:

DLP policies first

DLP policies establish environment-level security boundaries. They restrict which connectors and data flows the agent can use, helping prevent unauthorized access or data leakage.

Prompt modifications second

After the platform guardrails are established, configure the agent’s behavior. Prompt modifications can enforce: - Appropriate tone - Required disclaimers - Refusal behavior - Restrictions on unsupported or unsafe requests

Adversarial testing last

Test the configured agent with jailbreak attempts, prompt injection, malicious inputs, and attempts to obtain sensitive information. Testing is most useful after DLP and behavioral controls are in place.
The stated answer is consistent with the scenario. The key principle is secure the environment first, configure agent behavior second, and validate the controls through testing last.
Lagos, Nigeria

AI Explanation - verified by User6346 on: July 16, 2026
Question 22:
Question 22 asks if the given solution meets the goal of reducing admin effort for deploying a large number of VMs weekly (Windows Server 2016 and Ubuntu Linux) and then removing them in the same week.

The proposed solution: use Microsoft Managed Desktop.

Why this does not meet the goal:

- Microsoft Managed Desktop is aimed at managing end-user devices (Windows 10/11) for enterprises, not at provisioning or life-cycle management of Azure VMs. - It does not inherently automate creation/deletion of large VM fleets or support mixed OS images like Windows Server 2016 and Linux.

A better fit would be Azure DevTest Labs (or similar lab services), which is designed to:

- create and manage many VMs for development/testing, - support both Windows and Linux images, - provide templates, auto-shutdown/start, and easier lifecycle management to reduce admin effort.
Answer: No. The MS Managed Desktop approach does not align with the VM lifecycle automation needs; DevTest Labs would be a better choice for this scenario.
Bengaluru, India

AI Explanation - verified by rjbnyc on: August 07, 2026
Question 145:
For Question 145, the selections are:

Storage accounts: storage1, storage2, and storage3

Log Analytics workspace: Analytics3

Why:

Azure Backup reports can send the AzureBackupReports diagnostic log to eligible storage accounts. The storage account’s subscription and region do not have to match the Recovery Services vault, so all three listed storage accounts are valid.

The Log Analytics workspace must be in the same region as the Recovery Services vault for this configuration. Vault1 and Analytics3 are both in West Europe, making Analytics3 the valid workspace.

The subscription containing the workspace can be different from the vault’s subscription; the important restriction here is the regional requirement.
Paducah, United States

AI Explanation - verified by User6405 on: July 29, 2026
Question 51:
Here’s a focused explanation of question 51.

Context: You’ve enabled auditing in Dataverse and need to trim audit data to free storage. The question asks which deletion options you can use.

What the options typically mean:

- by record: delete audit logs for specific records (per-entity instance). - between two specified dates: delete audit logs that fall within a date range (a window you specify). - by table older than a specified date: delete all audit logs for a given table that are older than a date (per-table purge). - by column: not a standard deletion criterion for auditing. Auditing is managed at the table/record level, not by a column.

About the provided answer (A, C, D): The list includes “by column,” which isn’t a typical or supported way to purge audit data. The more plausible trio is A (by record), B (date range), and C (by table older than date). If the exam expects A, C, D, that seems incorrect or mis-stated in the source.

Practical takeaway: To reduce audit storage, use per-record deletions, per-table purge by date, and/or date-range deletions as supported by the environment’s audit management UI or admin docs.

If you’d like, I can pull the official Microsoft docs to confirm the exact supported deletion criteria for audit data.
Frankfurt Am Main, Germany

AI Explanation - verified by User7866 on: July 20, 2026
Question 52:

Correct answer: D.

Why: In a service offering, a service action is the activity performed by the service provider to deliver or support the service. A service desk agent provides support to a user is the actual action.

Why the others aren’t service actions:

- A: A mobile phone enabling remote work is a product/asset, not an action. - B: A password allowing a user to connect to WiFi is an access credential. - C: A license allows installation of software and is an entitlement, not an action.
Kuching, Malaysia

AI Explanation - verified by User9156 on: July 24, 2026
Question 11:
Answer: False
Why: The COPY command does not always require you to specify a File Format. You can execute COPY without a FILE_FORMAT if:

The stage has a default file format defined (e.g., when you create the stage with FILE_FORMAT = (...)), and Snowflake will use that default.

- Example: CREATE STAGE my_stage FILE_FORMAT = (TYPE = 'CSV'); then COPY INTO my_table FROM @my_stage;

You use a named file format attached to the stage, or you specify an inline format in the COPY command, e.g., COPY INTO my_table FROM @my_stage FILE_FORMAT = (TYPE = 'CSV');

If neither a stage default nor an inline/named format is defined, and the files’ formats aren’t unambiguously inferred, the COPY will fail.
Quick takeaways:

Use a stage default: omit FILE_FORMAT in COPY.

Or rely on a named/inline format: specify FILE_FORMAT in COPY or set a format on the stage.

Chennai, India

AI Explanation - verified by User9425 on: August 06, 2026
Question 27:
Correct answer: A
You cannot enable encryption directly on an existing unencrypted AMI. Instead:

Create a new AMI or copy the existing AMI while specifying EBS encryption and an appropriate AWS KMS key.

This creates an encrypted AMI backed by encrypted EBS snapshots.

Copy the encrypted AMI to the destination Region, using a KMS key available there.

Launch the application stack from the encrypted AMI.

Why the other options are incorrect:

B: AWS KMS does not encrypt an existing unencrypted AMI in place. You must create an encrypted copy.

C: AWS Certificate Manager manages TLS certificates, not EBS or AMI encryption.

D: Enabling encryption by default affects newly created EBS volumes and snapshots; it does not encrypt an existing unencrypted AMI during copying.

The key exam concept is: convert an unencrypted AMI by copying it and specifying encryption parameters, then copy the encrypted version across Regions.
Lagos, Nigeria

AI Explanation - verified by User2728 on: August 14, 2026
Question 24:
Correct answer: B — The host is likely a printer.
The key evidence is the combination of printing-related services:

Port 515: LPD/LPR line-printer service

Port 631: IPP — Internet Printing Protocol

Port 9100: JetDirect/RAW printing, commonly used by network printers

The additional open ports—FTP (21), Telnet (23), HTTP (80), and NetBIOS (139)—may provide printer administration, firmware transfer, or network-management functions.
Why the other choices are less likely:

Linux machine: Linux could run these services, but the three printer-specific ports strongly indicate a printer.

Router: Routers may use Telnet and HTTP, but normally would not expose ports 515, 631, and 9100 together.

Windows machine: Windows can share printers, but this particular service combination is more characteristic of a network printer’s embedded operating system.

The NMAP output also says the OS was difficult to identify, which is common with embedded printer systems.
Izmir, Türkiye

AI Explanation - verified by User6730 on: August 02, 2026
Question 27:
Question 27 asks about the UDP ports used by L2TP during a Haiwei Secure VPN client initialization.
Key points:

L2TP uses UDP port 1701 for the L2TP control channel.

The destination port is 1701; the source port is a dynamically chosen ephemeral port on the client (not 1701).

Therefore the statement that both source and destination ports are 1710 is incorrect (and 1710 is not the standard L2TP port).

Answer: FALSE
Why:

The destination port should be 1701, not 1710.

The source port should be an ephemeral port chosen by the client, not 1701.

Algiers, Algeria

AI Explanation - verified by User3332 on: August 11, 2026
Question 17:
Correct answer: D — 587
Port 587 is used for authenticated SMTP email submission, typically with encryption such as STARTTLS. Email clients use it to securely send outgoing mail through a mail server.
Why the others are incorrect:

25 — Traditional SMTP server-to-server mail transfer; not normally used for secure client submission.

110 — POP3, used to retrieve email and typically unencrypted.

143 — IMAP, used to access email and typically unencrypted.

Note: Port 465 is also commonly associated with SMTP over implicit TLS, but it is not one of the choices. Therefore, 587 is the best answer here.
Lincoln, United States

AI Explanation - verified by User3114 on: August 10, 2026
Question 45:
Question 45: The answer key appears incorrect. The best answer is D: “Submit the request using company official channels to ensure the policy is okay to distribute.”

The policy is confidential, and the requester is no longer authorized merely because they used to work for the organization.

The security professional should not disclose it by email or display it on a device without authorization.

Using official channels allows the organization’s owner or information custodian to verify:

- Whether the former employee has a legitimate business need - Whether disclosure is permitted - Whether any redaction or secure delivery is required
Why C is not best: Ignoring the request avoids an immediate disclosure but is not a proper handling process. The request should be acknowledged and routed through the organization’s approved authorization process.
Pretoria, South Africa

AI Explanation - verified by User8744 on: August 13, 2026
Question 41:
Correct answer: C — The customer's requirements should have been captured in order to meet the customer's standards.
The product may have been technically advanced, but it failed because it did not satisfy the customer’s defined needs. At the beginning of the project, the project manager should have:

Elicited and documented customer requirements

Converted them into clear, measurable specifications

Validated the requirements with the customer

Used them as the basis for design, quality checks, and acceptance

Why the other options are weaker:

A: Requirements should reflect the customer’s needs—not the supplier’s standards.

B: Iteration review planning does not replace proper requirements collection.

D: A retrospective occurs after work is completed and is mainly for process improvement, not initial requirements definition.

This question tests the importance of requirements management and stakeholder engagement before product design and delivery.
Johor Bahru, Malaysia

AI Explanation - verified by User4084 on: August 03, 2026
no ans showing is premier. why? if developer .standard,prof direct can also take new request, then why only premier
You’re right to question that. Based on current Azure support plans:

Basic: billing/subscription support only; no technical support requests can be opened.

Developer, Standard, Professional Direct, and Premier: include technical support and allow opening new support requests.

So the correct set of plans that allow new support requests is all four paid plans, not just Premier. If your material shows only Premier as the answer, that’s likely an error in the answer key or outdated material.
What to do:

If option A corresponds to “Developer, Standard, Professional Direct, Premier,” that is the correct choice.

If the option text is really “Premier only,” that would be incorrect per current Azure docs.

Official reference: Azure support plans page (Basics vs. paid plans). If you want, I can walk through the wording of the plan descriptions to pinpoint exactly where this inconsistency lies.
Stockton-On-Tees, United Kingdom

AI Explanation - verified by steven.g.rogers76 on: July 24, 2026
Question 43:
No — D isn’t correct. For question 43, the valid ways to surface error events from the Event table are:

Event | search "error"

Event | where EventType == "error"

search in (Event) "error"

The option D (search in (Event) | where EventType –eq "error") uses a wildcard as the search term, which isn’t valid syntax for the search operator and would not reliably return error events.
So B is one correct form, and the other two correct forms are the 1st and 3rd items above. If you’d like, I can walk through how each query works.
El Paso, United States

AI Explanation - verified by User7070 on: July 17, 2026
Question 5:
Question 5 asks if the proposed solution (PaaS) is appropriate for deploying Azure virtual machines.

Correct answer: No (B).

Why:

To deploy and manage Azure VMs, you use Infrastructure as a Service (IaaS). IaaS provides the actual virtual machines you configure, patch, and control.

Platform as a Service (PaaS) abstracts infrastructure and OS management and is used for hosting applications (e.g., web apps) on managed runtimes, not for provisioning and managing individual VMs.

So the goal (deploying VMs) is not met by using PaaS; you should use IaaS instead.
Delhi, India

AI Explanation - verified by is.chan.army on: August 03, 2026
Question 48:
Question 48 asks which guideline would help stop insider attacks by privileged users.

Correct answer: D – Do not enable default administrative accounts to ensure accountability.

- Rationale: Privileged accounts carry high risk. Default or shared admin accounts are hard to audit and easy for attackers to abuse. Disabling default accounts and requiring unique admin credentials improves accountability and reduces misuse.
Why the others are not correct:

A – Do not use encryption methods … backups and sensitive information: Encryption helps protect data; not using it increases risk, not reduces insider threats.

B – Do not allow administrators to use unique accounts during installation: We actually want unique admin accounts, not the opposite.

C – Do not control the access to administrators and privileged users: Failing to control access directly enables misuse.

In practice, combine D with broader controls: least privilege, separate admin and daily-use accounts, MFA, robust logging, and regular review of privileged activity.
Tamarac, United States

AI Explanation - verified by surajnaidu9999 on: July 21, 2026
Question 1:
Answer: D (Reconnaissance and Initial Access)

Phishing can map to two MITRE ATT&CK tactics depending on the attacker’s objective.

- Reconnaissance: “Phishing for information” is a sub-technique used to elicit sensitive data for targeting. - Initial Access: Phishing can also be used to gain a foothold by delivering malicious payloads/executing code.

Therefore, phishing isn’t confined to a single tactic; it can serve both Reconnaissance and Initial Access, which is why option D (Reconnaissance, Initial Access) is correct.

Mumbai, India

AI Explanation - verified by User8745 on: July 19, 2026
Si la pregunta fuera: Which device is part of the fabric overlay?
Respuesta: el AP (punto de acceso).

En Cisco SD-Access, el fabric overlay se extiende hasta lo inalámbrico; los APs son nodos de borde del fabric y su tráfico queda dentro del overlay.

El cliente inalámbrico genera tráfico que viaja por el overlay, pero no es un componente del fabric en sí.

El WLC es principalmente una herramienta de gestión y control, no forma parte del overlay; el underlay es el transporte físico.

Lima, Peru

AI Explanation - verified by User8514 on: August 14, 2026
Question 15:
The answer key shows A, but that appears incorrect. The best answer is C:
> Create a junction object with Master-Detail Relationships to both Machinery and Construction Job.
Why:

A single Construction Job can use multiple Machinery records.

A single Machinery record may be used on multiple Construction Jobs.

This is a many-to-many relationship, which Salesforce models using a junction object.

The junction object can contain fields such as:

- Assignment date - Return date - Usage cost - Maintenance cost
For example, an object such as Machinery Assignment could have:

Master-detail to Machinery

Master-detail to Construction Job

Date and cost fields

Option A—a lookup from Construction Job to Machinery—would allow only one Machinery reference per job and would not properly support multiple machinery assignments or assignment-specific dates and costs.
San Juan, Philippines

AI Explanation - verified by User7037 on: August 05, 2026
Question 132:
The correct answer is C. Balanced scorecard.
Why C is the best choice:

The Balanced Scorecard translates an organization’s vision and strategy into a set of concrete objectives and metrics across four perspectives (financial, customer, internal processes, learning & growth). This framework explicitly links IT goals to business goals and provides a way to measure and monitor alignment over time.

Why the other options are less suited:

Enterprise architecture (EA): Great for governance, standards, and roadmaps to ensure IT assets support business needs, but it’s more about structure and alignment at design time rather than directly measuring ongoing alignment of goals.

KPIs: Useful metrics, but they don’t by themselves provide a full framework to ensure IT goals are aligned with organizational strategy.

Enterprise dashboard: A visualization tool for metrics; it helps report status but doesn’t inherently establish or assess alignment.

In short, the Balanced Scorecard is the focused framework for aligning IT goals with the organization’s strategic objectives and tracking their progress.
Lagos, Nigeria

AI Explanation - verified by User6887 on: July 21, 2026
Question 32:
The correct answer is global unicast (D).

Global Unicast: These are the IPv6 addresses that are globally routable on the Internet. They’re allocated by Regional Internet Registries (RIRs) and can be reached from anywhere with proper routing (similar to IPv4 public addresses). Example ranges include 2000::/3.

Link-local: fe80::/10. Used only on the local link; not routable beyond the directly connected network.

Unique Local Addresses (ULA): fc00::/7. Private addresses for internal use within an organization; not publicly routable on the Internet (like IPv4 private addresses).

Multicast: ff00::/8. One-to-many addresses used for group communication, not unicast routing.

Thiruvananthapuram, India

AI Explanation - verified by User2505 on: August 10, 2026
Question 35:
Correct answer: A — Generative pre-trained transformers (GPT)
GPT models are designed to understand and generate human language. They can translate an employee’s natural-language request—such as “Show total sales by region for last quarter”—into a structured SQL query.
Why the others are incorrect:

Residual neural network (ResNet): Primarily used for computer vision tasks such as image classification.

Support vector machine (SVM): Commonly used for classification and regression, not natural-language query generation.

WaveNet: Designed mainly for generating or modeling audio and speech.

The key requirement is natural language to SQL generation, which is a generative language-model task. In a production system, the generated SQL should also be validated and access-controlled before execution to prevent unsafe or unauthorized database queries.
London, United Kingdom

AI Explanation - verified by User3759 on: August 05, 2026
Question 6:
Question 6 answer: B — a data pipeline
You need to copy data from:

Source: on-premises SQL Server Database1

Destination: Fabric Warehouse Warehouse1

Connectivity: on-premises data gateway

A data pipeline is designed for orchestrating data movement between sources and destinations. Its Copy Data activity can use the on-premises gateway to access SQL Server and load the data into the warehouse.
Why the other options are weaker:

Dataflow Gen1: Primarily for Power Query transformations and isn’t the best Fabric-native choice for this copy operation.

KQL queryset: Queries data; it does not orchestrate copying from SQL Server.

Notebook: Could perform custom code-based movement, but it is unnecessary and less direct than a pipeline.

Exam cue: “Copy data from one system to another,” especially with a gateway or scheduled movement ? data pipeline.
Fredericton, Canada

AI Explanation - verified by User9769 on: August 06, 2026
Question 12:
Correct answer: A — Hosts file
The local hosts file maps hostnames to IP addresses before—or independently of—normal DNS resolution. If a user’s hosts file contains an incorrect entry, that user may be sent to the wrong IP address while everyone else reaches the website normally.
Why the others are less likely:

Self-signed certificate: Causes a certificate warning, not incorrect IP resolution.

Nameserver record: A DNS record problem would typically affect multiple users, not just one.

IP helper: Relays DHCP or other broadcast traffic between networks; it does not control website name resolution.

The troubleshooting step would be to inspect the local hosts file for an incorrect or malicious entry and remove or correct it.
Morrow, United States

AI Explanation - verified by User5264 on: July 19, 2026
Question 5:
Question 5 is asking which Data view options you need to identify the min and max values for each column in the Dataflow results.
Key ideas:

To get min/max per column, you need column profiling. That’s provided by enabling the column profile.

To actually see those min/max values, you should show the column profile in the details pane, and you also need the details pane itself enabled so you can view it.

Recommended selections:

Enable column profile (B)

Show column profile in details pane (C)

Enable details pane (E)

Why not the others?

Show column value distribution (D) shows distribution shape but isn’t required to get min/max.

Show column quality details (D) deals with data quality metrics, not min/max.

Note: The provided key on the page lists B and E, but to view min/max in the UI, you typically need all three: B, C, and E. If your exam system shows a different combination, the concept is still: enable profiling, display it in the details pane, and ensure the details pane is visible.
Copenhagen, Denmark

AI Tutor 👋 I’m here to help!

Cisco 350-901 Exam Actual Questions Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 14 )

QUESTION: 60

QUESTION: 61

QUESTION: 62

Explanation:

QUESTION: 63

Reference:

QUESTION: 64

Reference:

Cisco 350-901 Exam Actual Questions
Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 14 )