Refer to the exhibit. The application follows a containerized microservices architecture that has one container per microservice. The microservices communicate with each other by using REST APIs. The double-headed arrows in the diagram display chains of synchronous HTTP calls needed for a single user request.

Which action ensures the resilience of the application in the scope of a single user request?

Implement retries with exponential backoff during HTTP API calls.
Set up multiple instances of each microservice in active/active mode by using the Orchestrator.
Redesign the application to be separated into these three layers: Presentation, API, and Data.
Create two virtual machines that each host an instance of the application and set up a cluster.

Answer(s): A

Show Answer Next Question

QUESTION: 62

DRAG DROP (Drag and Drop is not supported)
Drag and drop the steps on the left into the order on the right for an end-user to access an OAuth2 protectedresource using the 'Authorization Code Grant' flow.

Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Show Answer Next Question

QUESTION: 63

In the three-legged OAuth2 authorization workflow, which entity grants access to a protected resource?

resource owner
client
resource server
authorization server

Answer(s): A

Reference:

https://developer.orange.com/tech_guide/3-legged-oauth/

Show Answer Next Question

QUESTION: 64

What are two steps in the OAuth2 protocol flow? (Choose two.)

The user is authenticated by the authorization server and granted an access token.
The user’s original credentials are validated by the resource server and authorization is granted.
The user indirectly requests authorization through the authorization server.
The user requests an access token by authentication and authorization grant presentation.
The user requests the protected resource from the resource server using the original credentials.

Answer(s): C,E

Reference:

https://www.digitalocean.com/community/tutorials/an-introduction-to-oauth-2

Show Answer Next Question

Download PDF Next Page

Viewing page 14 of 78
Viewing questions 66 - 70 out of 507 questions

Post your Comments and Discuss Cisco 350-901 exam prep with other Community members:

Comments:

Name:

350-901 Exam Discussions & Posts
350-901 AI Verifications

Alex on: March 02, 2025
Great material
UNITED KINGDOM

Baud on: September 08, 2026
This exam was tough but doable.
Malta

Replica on: July 23, 2026
Short study sessions finally paid off.
Finland

Dnssec on: August 19, 2026
Work made me squeeze in short study sessions on the fly, so glad I passed and done with this cert.
Germany

Socket on: June 18, 2026
The exam was super stressful. Glad the prep on this website helped me out.
Norway

Manpage on: June 26, 2026
Quick sessions at work helped pass.
Malta

Thread on: August 16, 2026
Crammed like crazy and saved time with this site passed the exam slowly but surely.
Iceland

Sandbox on: June 27, 2026
This exam was tricky and covered way more stuff than I thought it would. The AI assistant on this site helped me fill in some gaps though so not too bad.
Singapore

Bgp on: August 28, 2026
This website is cool because I crammed slowly and saved time and money getting through this exam.
Qatar

Kmem on: September 01, 2026
This exam was harder than expected but manageable.
Netherlands

Stdout on: July 18, 2026
This exam was tougher than I thought. AI assistant helped fill in the gaps though.
Belgium

ZeroDay on: August 31, 2026
This exam was a beast but these questions on the site helped me get through it.
Poland

Opcode on: July 22, 2026
Not gonna lie thought I was toast but those practice questions had my back.
Belgium

Dotfile on: September 22, 2026
Saved time cramming slowly got me through this exam and it didn't cost much.
United Kingdom

Baud on: August 12, 2026
Hard exam but these questions nailed it man.
United Kingdom

Kernel on: June 23, 2026
This exam was tougher than I thought but the practice questions here made it manageable.
Austria

Ping on: June 12, 2026
Fast cramming worked passed this exam.
Germany

Unicast on: July 13, 2026
This cert took me longer than I thought but with consistent review time and using the practice questions here I passed.
Australia

ExamDetails on: September 27, 2026
Solid Exam but very chalenging
Washington, United States

Glibc on: July 19, 2026
I took my time reviewing the questions but I passed this exam in the end so good enough.
Canada

Regex on: June 14, 2026
Worked hard felt good passing.
Lithuania

Bashrc on: August 23, 2026
The exam was tougher than I thought but the practice questions here made it doable.
Canada

Semlock on: August 05, 2026
Crammed using practice questions from this site and saved lots of time and money passing the exam slow but steady.
Switzerland

Strace on: June 23, 2026
This exam was tough but these questions helped.
Denmark

Bashrc on: August 29, 2026
Didn't feel ready but practice questions helped.
Qatar

Forkbomb on: June 29, 2026
Relieved to be done finally.
Netherlands

ZeroDay on: September 01, 2026
I was cramming with this site save me time and money so passed.
Slovenia

Sandbox on: September 04, 2026
I went slowly through the review time it was chill but after passing this exam I felt really accomplished.
Norway

Shebang on: June 28, 2026
At first I was unsure but practice questions were super helpful.
Germany

ZeroDay on: August 21, 2026
That test was no joke. Good thing the prep materials worked out.
Australia

Sudoer on: August 31, 2026
Prep was a lifesaver on this stressful test. Would've bombed without it.
Japan

Mutex on: September 19, 2026
Totally saved time and money cramming for this cert with relevant questions here slowly got me through it.
Italy

Synack on: August 20, 2026
Was kinda slow at first then I review more and pass finally.
Spain

Sysctl on: July 21, 2026
Didn't feel confident at first but the practice questions here really helped me learn.
Latvia

Bashrc on: July 06, 2026
This cert took forever but passed.
Switzerland

Dotfile on: July 18, 2026
Man this exam was tough but these prep questions got me through it.
Portugal

Dotfile on: September 28, 2026
Didn't feel confident first but these questions helped a lot.
Austria

Symlink on: July 29, 2026
Slow start but passed after solid review time.
Israel

Stacktrace on: June 25, 2026
Was kinda surprised how much this exam covered man it was a lot. Thank god for the AI assistant here helped me out big time.
Uruguay

Synack on: July 01, 2026
Thought I was not ready but practice questions helped.
United States

Parity on: August 25, 2026
Man this exam went way deeper than I thought. The AI assistant on this site helped a lot to fill in the gaps.
Chile

Symlink on: August 19, 2026
This exam was so stressful. The prep material here really helped calm me down.
Portugal

Socket on: July 30, 2026
This exam threw more stuff than I prepared for. The AI assistant on this site was a lifesaver though it kept me sane.
UAE

Endianness on: July 23, 2026
I didn't feel confident at first but the practice questions on this site helped me understand the material a lot better.
Ireland

Baud on: July 22, 2026
Juggling work with short study sessions made passing this exam a sweet relief.
Norway

Bytecode on: September 18, 2026
Exam was tougher than I thought. AI assistant really helped fill the gaps.
Portugal

Manpage on: September 14, 2026
The exam was tougher than I expected and had stuff I wasn't ready for. The AI assistant on this site really helped make sense of it all though.
Sweden

Baud on: August 26, 2026
Juggling work and short study sessions it felt great to finally pass this cert.
United States

Packet on: September 11, 2026
At first I didn't feel confident about this exam but using the practice questions here really helped me learn a lot.
Saudi Arabia

Unicast on: July 19, 2026
Practice questions helped me feel confident.
Portugal

AI Explanation - verified by melbailey2018 on: October 06, 2026
Question 67:
The answer key shows A, but that appears incorrect. The correct answer is D. Screen Flow.

A Screen Flow can present a form that inspectors complete and submit on an Experience Cloud page.

It can collect inspection findings, validate the input, and create or update records.

An Autolaunched Flow has no user interface, so it cannot directly provide the form.

A Related List only displays related records, and Record Detail is primarily for viewing or editing an existing record—not for a custom inspection submission form.

Austin, United States

AI Explanation - verified by User4615 on: October 01, 2026
Question 29:
Correct answer: A. Hashing
A cryptographic hash produces a fixed-length value based on the software’s contents. The company can calculate and securely store the hash of the approved final version. Later, it recalculates the hash:

Matching hashes: The software is likely unchanged.

Different hashes: The software or its contents have been modified.

Hashing provides integrity verification. It does not prevent tampering, so the original hash must be protected from unauthorized changes. In real-world software distribution, a digital signature is often preferred because it also verifies the publisher’s identity, but that is not one of the available options.

Encryption: Protects confidentiality, not primarily integrity.

Baselines: Document expected configurations and support comparison, but hashing is more directly suited to verifying file integrity.

Tokenization: Replaces sensitive data with tokens and is unrelated to software tampering.

Annandale, United States

AI Explanation - verified by khaleel_mehdi on: September 28, 2026
Question 36:
The answer key shows A (1), but I believe the correct answer is B (2).
A single Teams auto attendant supports:

A business-hours greeting

An after-hours greeting

A holiday greeting

However, with business hours set to Monday–Friday, 09:00–17:00, the same after-hours greeting would normally apply to both:

Weekday evenings/nights

Saturdays and Sundays

That does not meet the requirement for separate weekday after-hours and weekend greetings.
A possible two-auto-attendant design is:

Auto attendant 1

- Business hours: office-hours greeting - Holidays: national-holiday greeting - Outside those periods: route calls to Auto attendant 2

Auto attendant 2

- Weekend schedule: weekend greeting - Its after-hours flow: weekday outside-office-hours greeting
Therefore, two auto attendants are needed to provide four distinct time-based greetings.
Hyderabad, India

AI Explanation - verified by User6155 on: September 21, 2026
Question 29:
Correct answer: D — Plan Human Resource Management
Organizational theory explains how people, teams, and organizational units behave and interact. It helps the project manager design an effective project organization by considering:

Reporting relationships

Organizational structures

Leadership styles

Team maturity

Individual and group behavior

Communication and motivation

In Plan Human Resource Management, the project manager identifies and documents project roles, responsibilities, required skills, reporting relationships, and the staffing management plan. Organizational theory supports this planning work.
Why the other options are less appropriate:

Acquire Project Team: Focuses on obtaining the people needed for the project.

Develop Project Team: Focuses on improving team skills, relationships, and performance.

Manage Project Team: Focuses on tracking performance, resolving issues, and managing changes within the team.

Organizational theory may influence those processes, but in the PMI process framework it is specifically listed as a tool and technique for Plan Human Resource Management.
Johannesburg, South Africa

AI Explanation - verified by User6439 on: September 09, 2026
Question 13:
Correct answer: C. Jailbreaking
Jailbreaking removes or bypasses restrictions imposed by a smartphone’s manufacturer or operating system. This can allow the user to:

Install unauthorized or unapproved applications

Access system areas normally restricted

Add features unavailable in the default software

Modify the device’s operating system

Why the others are incorrect:

SQL injection (SQLi): Attacks databases by inserting malicious SQL commands.

Cross-site scripting (XSS): Injects malicious scripts into web pages viewed by users.

Sideloading: Installs an application from outside the official app store, but it does not necessarily remove the phone’s operating-system restrictions.

The answer key’s C is correct.
Brandenburg An Der Havel, Germany

AI Explanation - verified by User6058 on: September 10, 2026
Question 139:
Correct answers: D and E.

D — Value analysis: Correct. It examines an existing product to identify ways of reducing its cost while still providing the required functions, quality and reliability.

E — Kaizen costing: Correct. It involves making continuous, small improvements and cost reductions while the product is already in production.

Why the others are incorrect:

Functional analysis: It is not limited to minimizing the cost of the originally defined functions. It examines what functions are required and how they can be provided at the lowest overall cost.

Value engineering: Usually applies to the design and development of a new product, rather than being a fundamental redesign of existing organisational processes. That description is closer to business process re-engineering.

Target costing: The target cost is generally established during the product development stage, before production begins. It is not continuously reset while the product is in production.

Maseru, Lesotho

AI Explanation - verified by User6257 on: September 22, 2026
Question 28:
Pipeline1 should be included in Workspace2.
The correct resulting structure is:

\Pipeline1

\Folder1\Lakehouse1

Reason:

Pipeline1 remains at the workspace root in Workspace1, so it is deployed to the root of Workspace2.

Lakehouse1 was moved into Folder1, so its full path is preserved as \Folder1\Lakehouse1.

Fabric deployment pipelines preserve folder paths because an item’s full path is treated as part of its name.

If the displayed option appears to show only \Folder1\Lakehouse1, the answer formatting or image extraction is incomplete. The stated explanation (“the folder structure is copied”) implies that both items are present, with only the lakehouse inside the folder.
Bangkok, Thailand

AI Explanation - verified by puranikatul on: September 26, 2026
Question 146:
The correct answer is B: a spoke.
In IntegrationHub, a spoke is a ServiceNow application that packages integration content for a particular third-party system or business function. A spoke can contain:

Actions that call external APIs

Subflows

Connection and credential aliases

Supporting integration logic

For example, a Slack spoke may provide actions for sending messages or creating channels.
Why the other choices are less accurate:

Action — A reusable operation within a flow, such as “Create a record” or “Send email.”

Connection — Defines how ServiceNow authenticates and communicates with an external system.

Integration step — A general flow step, not the name for the packaged integration.

Therefore, third-party integrations provided through IntegrationHub are generally called spokes.
Bengaluru, India

AI Explanation - verified by User2484 on: September 13, 2026
Question 3:
Question 3 tests AWS Organizations SCP inheritance and temporary account onboarding.
Correct answer: D, assuming the option text means:

Create a temporary Onboarding OU.

Move the new account into it.

Move the restrictive SCPs from the organization root to the Production OU.

Allow the account to update AWS Config.

Move the account into Production after onboarding.

Why this works:

An SCP attached at the organization root applies to every account and OU beneath it.

An SCP attached to the Production OU applies only to accounts in that OU.

Therefore, moving the restrictive SCP from the root to Production temporarily exempts the onboarding account without weakening the policies for existing production accounts.

Once onboarding is complete, moving the account into Production subjects it to the normal restrictions.

Important nuance: An Allow SCP cannot override an explicit Deny SCP. Therefore, simply placing an Allow SCP on the Onboarding OU would not work if the root SCP explicitly denies the AWS Config actions.
The other choices either remove protections permanently, introduce unnecessary maintenance, or incorrectly assume that an Allow SCP overrides a Deny.
Madrid, Spain

AI Explanation - verified by User9632 on: October 07, 2026
Question 12:
Correct answer: A — Hosts file
A computer’s hosts file provides local hostname-to-IP mappings and is checked before querying DNS. If it contains an incorrect entry for the website, that user may be sent to the wrong IP address while other users navigate normally.
Why the others are incorrect:

Self-signed certificate: Causes a browser security warning, not incorrect name resolution.

Nameserver record: A DNS problem would typically affect multiple users, not just one workstation.

IP helper: Relays services such as DHCP across network segments; it does not resolve website names.

The administrator should inspect the local hosts file for an incorrect entry and also consider clearing the workstation’s DNS cache after correcting it.
Cuyahoga Falls, United States

AI Explanation - verified by User3287 on: September 25, 2026
Question 1:
Correct answer: A — Configure SetupComplete.cmd in %windir%\Setup\Scripts.
SetupComplete.cmd runs automatically after Windows Setup completes and before the first user signs in. It is useful for applying final configuration to a newly deployed or generalized VM, such as:

Installing software

Applying configuration changes

Calling PowerShell scripts

Running setup or customization commands

The batch file can invoke a PowerShell script, for example:

cmd powershell.exe -ExecutionPolicy Bypass -File C:\Scripts\ConfigureVM.ps1

Why the other options are less suitable:

GPO logon script: Runs only when a user logs on and depends on domain/GPO processing.

GPO startup script: Runs during startup, but requires the VM to be domain joined and receives the applicable GPO.

Place scripts in a VHD: Merely makes the scripts available; it does not automatically execute them.

The explanation shown on the page discusses Azure’s Custom Script Extension, but that does not match the listed on-premises Hyper-V scenario. For the options provided, A is the best answer.
New Delhi, India

AI Explanation - verified by User4570 on: September 29, 2026
Question 6:
Question 6: Correct answer — Yes (A)
Azure virtual machines are an Infrastructure as a Service (IaaS) solution.
With IaaS:

Microsoft manages the physical datacenter, hardware, and virtualization.

You manage the virtual machine’s operating system, installed software, configuration, and data.

You choose the VM size, storage, networking, and scaling options.

Why the other options are incorrect:

SaaS: You consume a complete application managed by the provider, such as Microsoft 365.

PaaS: You deploy applications without managing the underlying operating system or VM infrastructure, such as Azure App Service.

Because deploying Azure VMs requires you to manage the virtual machines and their operating systems, IaaS is the appropriate cloud service model.
Warrington, United Kingdom

AI Explanation - verified by User9362 on: October 10, 2026
Question 37:
Correct answer: Fault tolerance
The requirement is that servers continue operating if one Azure datacenter becomes unavailable. This is a failure-resilience requirement, so the relevant concept is fault tolerance.
In Azure, you can improve fault tolerance by deploying replicated virtual machines across Availability Zones. Availability Zones are separate physical locations within an Azure region, with independent power, cooling, and networking. If one zone—or its datacenter—fails, workloads can continue in another zone.
Why the other options are incorrect:

Elasticity: Automatically increases or decreases resources based on demand.

Scalability: The ability to increase capacity to handle more workload.

Low latency: Minimizes network response time; it does not provide protection from failures.

The answer key’s explanation is broadly correct, although the question says “data center” while the Azure feature used for this scenario is specifically Availability Zones. If the entire Azure region were unavailable, you would need a multi-region design instead.
Lagos, Nigeria

AI Explanation - verified by n.brahm85b on: September 13, 2026
Question 399:
Correct answer: C. Right-to-audit clause
A right-to-audit clause in a vendor contract gives the organization permission to inspect or assess the vendor’s:

Security controls

Processes and procedures

Compliance evidence

Performance against contractual requirements

This is especially important for third-party risk management because the organization remains responsible for understanding how a service provider protects its data and systems.
Why the others are less appropriate:

Service-level agreement (SLA): Defines expected service performance, such as uptime and response times.

Memorandum of agreement (MOA): Documents a general agreement between parties, but does not necessarily provide audit rights.

Supply chain analysis: Identifies risks across suppliers and dependencies, but is not a contractual mechanism for reviewing vendor controls.

Cambridge, United Kingdom

AI Explanation - verified by User4590 on: September 22, 2026
Question 12:
Correct answer: A
Create one Amazon CloudFront distribution with:

Amazon S3 as the origin for static content

Application Load Balancer (ALB) as the origin for dynamic content

Amazon Route 53 configured to point the company’s domain name to CloudFront

Configure CloudFront cache behaviors, typically using URL paths:

/static/* ? S3 origin; cache content at edge locations

Dynamic paths such as /api/* ? ALB origin; forward requests to the EC2 application

This improves global performance because users connect to a nearby CloudFront edge location. Static objects are cached there, while dynamic requests are efficiently forwarded to the ALB. CloudFront can also improve dynamic request latency through its globally distributed network and optimized connections.
The other options are incorrect because AWS Global Accelerator is not needed when CloudFront is being used, and S3 is not used as a standard Global Accelerator endpoint. Using separate domain names would also add unnecessary complexity.
Staten Island, United States

AI Explanation - verified by User2188 on: September 10, 2026
Question 492:
Correct answer: C — “Adjacency Segment must be configured manually.”
An Adjacency Segment in Segment Routing represents a specific link or adjacency from one network device to a neighbor. It is identified by an Adjacency Segment ID (Adj-SID).
Why C is wrong:

An Adj-SID does not necessarily need manual configuration.

It can often be dynamically allocated by the router, although manual configuration may also be possible.

The adjacency information is advertised through the IGP, such as IS-IS or OSPF.

The other statements are essentially correct:

It is identified by an Adj-SID.

It represents a particular adjacency of a node.

Its meaning is generally local to the advertising node; unlike a Node-SID, it is not a globally reusable instruction across the network.

Setúbal, Portugal

AI Explanation - verified by User8952 on: September 23, 2026
Question 1:
Correct answer: C — three
Why:

The original app version exists.

You create and publish a new version, so there are now two versions.

When you restore the previous version, Power Apps does not delete or overwrite the newer version. Instead, it creates another version based on the restored one.

Therefore, the Versions tab shows:

Original version

Newly created and published version

New version created by the restore operation

So, the statement “you will see two versions” is incorrect; it should say three versions.
Brampton, Canada

AI Explanation - verified by User8855 on: October 07, 2026
Question 41:
Correct answer: D — A Dictionary Override sets field properties in extended tables.
A Dictionary Override lets you change the definition of a field inherited from a parent table, but only for a specific child table.
For example, if the Short description field is defined on the Task table, you could use a Dictionary Override to change its behavior specifically on the Incident table—such as making it mandatory, changing the default value, or modifying other field attributes.
Why the others are incorrect:

A: Describes an update-set conflict, not a Dictionary Override.

B: Describes a configuration item or change concept.

C: Describes an approval or workflow activity.

Ebene Cybercity, Mauritius

AI Explanation - verified by User9223 on: September 27, 2026
What are the different capacities that exist in fabric
In Microsoft Fabric, the relevant capacity options are:

Shared capacity

Microsoft-managed, shared resources. Used for basic Power BI content, but it does not provide dedicated Fabric capacity.

Fabric capacity — F SKUs

Dedicated Fabric capacity, such as F2, F4, F8, F16, and larger sizes up to F2048. It supports all Fabric workloads, including: - Lakehouses and warehouses - Notebooks and Spark - Data pipelines and Data Factory - Real-Time Intelligence - Power BI semantic models and reports - Direct Lake
F capacities can generally be scaled and paused, with Azure consumption billing.

Fabric trial capacity

A temporary Fabric capacity for evaluation. It is not intended for production use.

Existing Power BI Premium — P SKUs

Existing dedicated P capacities can support Fabric when Fabric is enabled for the tenant/capacity. However, F SKUs are the standard choice for new Fabric deployments.
PPU, A SKUs, and EM SKUs are Power BI licensing or embedding options—not the normal capacity choice for hosting all Fabric experiences.
Hyderabad, India

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 196:
Question 196 tests the principles of throughput accounting, which focuses on maximising cash generation through the organisation’s main constraint or bottleneck.
The correct statements are A, C and D:

A — If there is no demand, there should be no production.

Throughput accounting discourages producing for inventory. Production should be driven by actual customer demand.

B — Not all sales equal profit.

This statement is generally treated as false in this question. Throughput accounting defines throughput as sales revenue less direct material costs. Sales generate throughput, which contributes towards profit after operating expenses.

C — Stocking up on inventory is bad for business.

Inventory ties up cash and may incur storage, insurance and obsolescence costs. Throughput accounting aims to keep inventory as low as possible.

D — All costs, except materials, are considered fixed.

In the short term, throughput accounting treats operating expenses—including labour and overheads—as fixed. The main variable cost is usually direct materials.

E — Departments should operate at full capacity regardless of bottlenecks.

This is false. Producing more than the bottleneck can handle creates unnecessary inventory. Resources should be coordinated around the constraint.
Maseru, Lesotho

AI Explanation - verified by User2896 on: September 26, 2026
Question 7:
Correct answer: Establish a theory.
After identifying the problem, the technician forms a theory about the likely cause. Checking the OSI model layer by layer is a way to develop and test that theory—for example:

Layer 1: Check cables, power, and link lights.

Layer 2: Check switching, VLANs, and MAC learning.

Layer 3: Check IP addressing, routing, and gateways.

Higher layers: Check services, applications, and user settings.

The other options occur later:

Create a plan of action: Decide how to implement the fix.

Implement the solution: Apply the selected fix.

Verify functionality: Confirm the problem is resolved and systems work normally.

Khulm, Afghanistan

AI Explanation - verified by User1638 on: September 11, 2026
Question 20:
Correct answer: A — Determine an appropriate format for the presentation.
Before presenting requirements, Gary should consider:

The audience and stakeholders

The complexity and type of requirements

The communication method and level of detail needed

Whether to use diagrams, models, documents, demonstrations, or slides

This supports the BABOK task Communicate Business Analysis Information, which requires tailoring the presentation format and content to the stakeholders.
Why the others are less suitable:

B: Authority to host the presentation is not the key preparation activity.

C: Stakeholder sign-off may occur later; presenting requirements does not always require formal approval beforehand.

D: A scribe may be useful in a meeting, but hiring one is not a core preparation requirement for presenting.

Madala, Nigeria

AI Explanation - verified by hoodaanu06 on: September 27, 2026
Question 102:
Correct answer: B — Set up Dynamic Forms to conditionally show data.
Why:

Marketing users: Dynamic Forms can show all fields.

Support users: Field visibility rules can display only the Support preference fields on the record page.

Reporting: Both profiles can still report on all fields because Dynamic Forms controls page visibility, not the underlying field access.

Why the other options are unsuitable:

A — Two record types and page layouts: Page layouts can control field placement and editability, but they are less flexible for conditional field visibility and would not be the best fit here.

C — Muting permission set: Permission-set muting is used with permission-set groups; it does not conditionally hide fields on a page.

D — Field-Level Security: FLS would remove field visibility at the security level. If fields are hidden by FLS, users generally cannot report on or access those fields, conflicting with the requirement that both users report on all data.

Exam takeaway: Use Dynamic Forms when fields should be conditionally displayed on Lightning record pages while remaining available for reporting.
Toronto, Canada

AI Explanation - verified by User9902 on: September 16, 2026
What is this OS Login you keep saying
OS Login is a Google Cloud feature that lets users access Compute Engine VMs using their Google identities and IAM permissions, instead of managing SSH keys separately on every VM.
With OS Login enabled:

A user connects with their Google account.

Google associates the user’s SSH key with that identity.

IAM roles determine whether they can log in.

Access can be tied to a specific employee for auditing.

Removing the IAM role removes their login access.

Common roles include:

compute.osLogin: regular OS login access

compute.osAdminLogin: OS login with administrative privileges, typically including sudo

OS Login is enabled through instance or project metadata, commonly:

text enable-oslogin=TRUE

Without OS Login, Compute Engine commonly uses SSH keys stored in project or instance metadata. Those approaches are harder to manage individually and may not clearly identify which employee used a shared key.
Lagos, Nigeria

AI Explanation - verified by User5884 on: September 09, 2026
Question 29:
Correct answer: A — Hashing
A cryptographic hash creates a fixed-length value based on the software’s contents. After the final version is completed, the company can store the known-good hash and later recalculate it:

If the hashes match, the software has likely not changed.

If they differ, the software was modified or corrupted.

Why the other options are less suitable:

Encryption: Protects confidentiality by making data unreadable; it does not primarily verify that software was unchanged.

Baselines: Establish expected configurations or states, but hashing is the specific method for checking file integrity.

Tokenization: Replaces sensitive data with non-sensitive tokens and is unrelated to software integrity.

For stronger protection against someone replacing both the software and its hash, organizations commonly use digital signatures, which provide integrity and authenticity.
Houston, United States

AI Explanation - verified by User6268 on: September 26, 2026
Question 6:
Correct answer: Governance
The AWS Cloud Adoption Framework (AWS CAF) organizes cloud adoption capabilities into six perspectives:

Business

People

Governance

Platform

Security

Operations

The Governance perspective includes capabilities such as managing cloud initiatives, risks, compliance, and portfolio management. It helps ensure that cloud adoption is controlled and aligned with business objectives.
The other options are AWS Well-Architected Framework pillars, not AWS CAF perspectives:

Sustainability

Performance efficiency

Reliability

So the answer key’s C is correct.
Nowon-Gu, South Korea

AI Explanation - verified by User5527 on: September 16, 2026
Question 44:
Correct answer: C. Increase the volume of data used in training.
The model performed well on the training data but poorly after deployment. This indicates overfitting: the model learned the training examples too closely instead of learning patterns that generalize to new data.
Using more representative training data can help the model learn broader patterns and improve performance on unseen production data.
Why the other options are weaker:

Reduce the training data: Usually makes overfitting worse.

Add hyperparameters: Hyperparameters already control training; simply adding them does not solve the problem. Proper tuning could help, but that is not what the option states.

Increase training time: More training can worsen overfitting if the model is already memorizing the training data.

In practice, also use a validation set, regularization, and performance monitoring to confirm and mitigate overfitting.
Mumbai, India

AI Explanation - verified by szb.brian on: September 14, 2026
Question 1:
Correct answer: B. Transfer
Purchasing cyber insurance is a risk transfer strategy. The company shifts some of the financial consequences of a cyber incident to an insurance provider in exchange for paying premiums.

Accept: Acknowledges the risk without taking additional action.

Transfer: Shifts the risk or financial impact to another party, such as an insurer.

Mitigate: Reduces the likelihood or impact through controls like patching, MFA, or segmentation.

Avoid: Eliminates the activity that creates the risk.

The answer key’s B is correct. Note that insurance does not eliminate the underlying threat; it primarily helps transfer the financial impact.
Yangon, Myanmar

AI Explanation - verified by neal.humphries2 on: September 24, 2026
Question 28:
Correct answer: A — To use empiricism, based on knowledge that comes from experience.
This is not usually presented as one of the core Lean Startup concepts applied in PRINCE2 Agile. Empiricism is more strongly associated with Scrum, where decisions are based on observation, inspection, and adaptation.
The other options are central Lean Startup ideas:

Build, measure, learn: Create something, assess real feedback or results, and adapt.

Minimum viable product (MVP): Produce the smallest useful version to test assumptions and reduce uncertainty.

Fail fast: Test ideas early so that unsuccessful approaches can be identified before significant time or cost is invested.

Therefore, the answer key’s A is consistent with the distinction between Lean Startup and Scrum concepts.
Sheffield, United Kingdom

AI Explanation - verified by User8379 on: September 22, 2026
so the correct answer is ?
The correct three selections are:

Admin access to the deployment pipeline

Contributor access to the Development and Test workspaces

Viewer access to the Production workspace

So, using the option order shown, the answer is B, D, and E.
The displayed key, B and E, is incomplete because the developers also need Viewer access to Production to view production items. They should not have Contributor access there, since that would allow modifications or deployments to Production.
Delhi, India

AI Explanation - verified by User2896 on: September 26, 2026
Question 13:
Correct answer: A — Multitenancy
Multitenancy is a cloud design in which one application or infrastructure environment serves multiple groups of users or organizations while keeping their data and access logically separated. Here, the company application is hosted in the cloud and made available to both internal users and third parties.

VPC: A logically isolated virtual network within a cloud provider; it describes network design, not the user-access model.

NFV: Runs network services as software instead of on dedicated hardware.

SaaS: Delivers software over the internet. Although the application may be delivered as SaaS, the question emphasizes its availability to multiple user groups, which points to multitenancy.

Khulm, Afghanistan

AI Explanation - verified by User1909 on: October 02, 2026
Question 3:
Correct answer: A — Use API calls to access and integrate third-party datasets from AWS Data Exchange.
AWS Data Exchange is designed to help organizations discover, subscribe to, and access third-party datasets. After subscribing to a dataset, the company can integrate it into its analytics platform using supported delivery methods, including APIs or delivery to services such as Amazon S3.
Why the other options are incorrect:

B — AWS DataSync: Transfers data between storage systems. It is not a marketplace or integration service for third-party datasets.

C — Kinesis Data Streams and CodeCommit: CodeCommit stores source code, not third-party analytical datasets. Kinesis is for streaming data, not retrieving datasets from repositories.

D — Kinesis Data Streams and ECR: Amazon ECR stores container images, not third-party datasets.

The key clue is “third-party datasets” plus “least operational overhead.” AWS Data Exchange provides a managed way to obtain external data instead of building custom ingestion and integration processes.
Dhaka, Bangladesh

AI Explanation - verified by User9108 on: September 28, 2026
Question 59:
Question 59 asks for a measure that returns sales for the equivalent month in the previous year.
The expected pattern is:

DAX Previous Year Sales = CALCULATE( [Total Sales], PARALLELPERIOD('DATE'[Month], -1, YEAR) )

CALCULATE evaluates [Total Sales] after modifying the filter context.

PARALLELPERIOD shifts the current date period. -1 moves it backward, and YEAR specifies a one-year shift.

'DATE'[Month] is the date column used for the time calculation. In a proper date table, this should be a real date column or an appropriate calendar column—not merely text such as "January".

Important: The answer key’s use of PARALLELPERIOD is valid if the requirement is to shift the entire month period. SAMEPERIODLASTYEAR('DATE'[Date]) would also commonly solve “same period last year,” but it may not be one of the available choices. Ensure the date table is marked as a date table and related correctly to Sales.
Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User5938 on: September 11, 2026
Question 7:
Resposta: Standard.
O plano Standard atende a todos os requisitos:

Suporta domínios personalizados.

Oferece 50 GB de armazenamento — suficiente para os 10 GB de cada aplicação.

Usa instâncias de computação dedicadas.

Inclui balanceamento de carga entre instâncias.

É o plano mais econômico entre as opções que atendem a todos esses requisitos.

Basic não oferece todos os recursos necessários, enquanto Free e Shared não fornecem instâncias dedicadas.
Cabo Frio, Brazil

AI Explanation - verified by joaobarceloslopes on: October 07, 2026
Question 112:
Question 112: Yes, Yes, Yes
The question tests scaling in Azure:

Horizontal scaling — Yes

Horizontal scaling changes the number of instances. For example, a VM Scale Set can automatically add or remove virtual machines as demand changes. - Scale out: add VMs - Scale in: remove VMs

Vertical scaling — Yes

Vertical scaling changes the capacity of an existing instance while keeping the number of instances the same. For example, you might move a VM to a larger size with more CPU or memory. - Scale up: increase capacity - Scale down: decrease capacity

Scaling can manage costs — Yes

Autoscaling can add resources during busy periods and remove them when demand falls. This helps balance performance and cost, especially when resources are billed based on usage.
Key distinction:

Horizontal = more or fewer instances

Vertical = larger or smaller instances

Porto Alegre, Brazil

AI Explanation - verified by User7426 on: October 11, 2026
Question 11:
Tens razão: Device1 tem Windows 11, não Windows 8.1. Portanto, a minha justificação anterior estava errada.
O sistema operativo, por si só, não faz o Device1 ser “Não”. Windows 11 é compatível com Windows Autopilot. A análise depende sobretudo de:

O dispositivo estar registado no Windows Autopilot;

A atribuição de Profile1 ao grupo;

O estado de associação ao Microsoft Entra ID e de inscrição no Intune/MDM.

Com os dados que referiste, o resultado indicado continua provavelmente Não / Não / Sim, mas por razões relacionadas com registo no Autopilot e MDM, não por o Device1 usar Windows 8.1.
A explicação do gabarito que afirma “Device1 is running Windows 8.1” está incorreta. Como não consigo visualizar a tabela original nesta conversa, não consigo confirmar com segurança as três respostas sem os estados exatos de Entra join, Autopilot e MDM.
Loures, Portugal

AI Explanation - verified by User5051 on: September 25, 2026
Question 1:
The answer key appears incorrect. The best answer is A.
To make a person field available in both Adobe Marketo Engage and the CRM, you generally need to:

Create the field in the CRM on the relevant person records—typically Lead and Contact in Salesforce.

Give the Marketo Sync User read/write access to the field.

Marketo then synchronizes the CRM field into its person-field model.
Why B is not sufficient: Creating a field directly in Marketo and refreshing the schema does not create the corresponding CRM field or establish the CRM-to-Marketo synchronization. Schema refresh is used to recognize available CRM fields; it is not a substitute for creating and authorizing the field in the CRM.
The wording “lead or contact” in A is somewhat simplified—when both Lead and Contact objects are used, the field may need to exist on both with compatible definitions.
Faridabad, India

AI Explanation - verified by User2517 on: September 19, 2026
Question 59:
Correct answer: A — Work with the project scheduler to update the project timeline.
The team discovered an unforeseen dependency affecting a critical activity. The project manager should first determine and document the schedule impact by updating the project timeline with the scheduler.

A is correct: It establishes the revised dates and identifies the effect on the critical path.

B is premature: Stakeholders should be informed after the impact has been assessed and the updated schedule is understood.

C is not automatically appropriate: Fast-tracking may introduce additional risk and should be considered only after analyzing schedule options.

D is premature: Adding resources may not resolve a dependency and could increase costs without addressing the actual constraint.

The general sequence is: assess the impact ? update the schedule ? evaluate responses ? communicate the approved change.
Cebu City, Philippines

AI Explanation - verified by User7412 on: September 14, 2026
Question 43:
Correct answer: D — To ensure non-repudiation
An S/MIME digital signature allows recipients to verify that:

The message came from the claimed sender (authentication)

The message was not altered in transit (integrity)

The sender cannot easily deny having signed and sent it (non-repudiation)

Why the others are incorrect:

Compliance standards: May be a reason in some organizations, but it is not the primary security benefit.

Increase delivery rates: Digital signatures do not generally improve email delivery.

Block phishing attacks: Signatures can help recipients verify legitimate messages, but they do not block phishing by themselves.

S/MIME can also provide encryption, but a digital signature specifically addresses authenticity, integrity, and non-repudiation.
Biloxi, United States

AI Explanation - verified by User1738 on: September 17, 2026
Question 23:
Correct answers: B and D

Active remediation actions role in Microsoft Defender for Endpoint

Grants permission to approve or reject pending remediation actions generated by Defender for Endpoint. This is the action-specific permission required.

Security Reader role in Azure AD/Entra ID

Provides read-only access to security information in the Microsoft 365 security center, allowing the analyst to view incidents, alerts, and related data without granting broad administrative privileges.
Why the others are incorrect:

Security Administrator is broader than necessary because it grants extensive security-management permissions, violating least privilege.

Compliance Data Administrator is intended for compliance data management, not Defender for Endpoint remediation approvals.

Therefore, the answer key’s B and D is correct.
Pune, India

AI Explanation - verified by User4228 on: October 02, 2026
Question 46:
Correct answer: B. Captive portal
A captive portal redirects users to a web page before granting internet access. The coffee shop can require customers to enter a receipt number or other purchase information on that page.
Why the others are less suitable:

WPA3: Secures wireless traffic but does not normally verify whether someone has paid.

PSK: A shared Wi-Fi password gives access to anyone who knows it; it cannot easily validate individual receipts.

IEEE 802.1X: Provides user/device authentication, commonly through an authentication server, but is excessive and not designed specifically for a simple receipt-based guest-access workflow.

Exam clue: When users must accept terms, enter a code, or authenticate through a browser before accessing the network, select captive portal.
Jeddah, Saudi Arabia

AI Explanation - verified by User5548 on: September 10, 2026
Question 109:
Correct answer: A — To achieve divisional autonomy.
A transfer pricing system sets the price for goods or services transferred between divisions of the same organisation. A well-designed system allows divisions to make decisions independently, negotiate or respond to market conditions, and be assessed as separate performance units.
Why the other options are incorrect:

Maintain head office control: Transfer pricing generally supports decentralisation rather than direct head-office control.

Establish centralised decision making: This conflicts with divisional autonomy.

Develop a top-down culture: Transfer pricing is intended to support empowered divisions and goal congruence, not impose purely top-down management.

Transfer pricing should also encourage goal congruence—decisions that benefit an individual division should ideally also benefit the organisation as a whole.
Maseru, Lesotho

AI Explanation - verified by User9108 on: September 28, 2026
Question 53:
Correct answers: A and E

A. Remove rows where Sales[Status] is Canceled

The analysis uses only finished sales, so canceled transactions do not contribute to the report. Filtering them out in Power Query reduces the number of rows loaded and processed.

E. Remove Sales[Canceled Date]

This column is relevant only to canceled transactions, which are removed. Since it is not used in the analysis, deleting it reduces the model’s column storage.
Why the others are less suitable:

B: Removing Sales_Date would remove information users need—the date portion.

C: Changing Delivery_Time to Integer could alter its meaning or precision and is not necessarily safe.

D: Splitting the date/time column creates additional columns rather than simply removing unnecessary data.

Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User4647 on: October 05, 2026
Question 32:
Correct answers: A and C

A — Consumption-based pricing: AWS generally uses a pay-as-you-go model. You pay for the resources you consume rather than purchasing hardware upfront or paying for unused capacity.

C — Economies of scale: AWS purchases and operates infrastructure at a very large scale, allowing it to reduce costs and pass some savings to customers through lower service prices.

Why the others are incorrect:

Perpetual licenses: These involve paying once for permanent software ownership and are not a primary AWS Cloud economic benefit.

AWS Enterprise Support at no additional cost: Enterprise Support has an additional charge.

Bring-your-own-hardware model: AWS provides and manages the underlying cloud infrastructure; customers do not normally bring their own physical servers.

The key distinction is that cloud economics reduce upfront capital expenditure and let organizations align costs more closely with actual usage.
Cairo, Egypt

AI Explanation - verified by User5200 on: September 30, 2026
Question 32:
Question 32: No
A local network gateway does not meet the requirement.

A local network gateway represents an on-premises network—its address space and VPN device information—for an Azure Site-to-Site VPN connection.

It does not control which connection types are allowed between Azure web servers and database servers.

It is also unnecessary when both server groups are in the same Azure virtual network.

The appropriate service is a network security group (NSG). NSGs allow or deny inbound and outbound traffic using rules based on factors such as source, destination, protocol, and port.
Therefore, the answer key’s B (No) is correct.
Rome, Italy

AI Explanation - verified by User7834 on: October 01, 2026
Question 3:
Correct answer: D — Flow Builder
A wizard is a guided, multi-step form that collects information from a user. In Salesforce, this is created with a screen flow using Flow Builder.
Why the others are incorrect:

Process Builder: Automates actions based on record changes; it does not create interactive user forms.

Approval Process: Routes records for approval and captures approval decisions.

Outbound Message: Sends information to an external system; it does not provide a user interface.

For this scenario, the administrator could build screens that ask why the client was lost, collect notes, and then create or update a Salesforce record.
Yokohama, Japan

AI Explanation - verified by User3274 on: October 07, 2026
but if go the dedicated section you can only edit the allowlist. How can view the policy's purpose on the console?
You’re right to question it. The answer key’s C appears incorrect or uses “containment policy” imprecisely.
In the Falcon console, the dedicated Containment Policies area is primarily used to configure the containment allowlist—the IP addresses, domains, or hosts an endpoint may still communicate with while contained. That corresponds to D.
The trigger for containment is generally configured elsewhere, such as the response action associated with a detection, detection policy, or automated workflow, depending on your Falcon modules and console version. It is not normally defined by editing the containment allowlist.
So, based on what you see in the console:

Containment policy: controls permitted communication during containment.

Detection/response configuration: determines when containment is initiated.

For this question, I would treat D as the more accurate answer, and flag the published C answer as likely wrong or poorly worded.
Bolzano, Italy

AI Explanation - verified by joatan.fontoura on: September 21, 2026
Question 58:
Correct answer: A — Because SIR is a scoped application, roles and script includes begin with the sn_si prefix.
The answer key’s B appears incorrect. sn_si is the application’s scope/namespace prefix, used to distinguish Security Incident Response records, roles, scripts, and other application artifacts from those belonging to other applications.

sn_si_admin is an SIR administrator role.

The prefix helps prevent naming conflicts between applications.

It does not refer to a “Secure Identity token” or an instance security check.

For the exam, associate prefixes such as sn_si with scoped application namespaces.
Sapiranga, Brazil

AI Explanation - verified by User6794 on: September 12, 2026
I was asking if the reputation of the company affects the share price
Yes. A company’s reputation can affect its share price.
In this case, if V is associated with farms using forced or exploitative labour:

Customers may boycott V’s products.

Supermarket customers may stop buying from V.

Investors may view V as having higher legal, ethical and reputational risk.

V could face fines, lawsuits, contract losses and higher costs.

Expected future profits may fall.

These factors can reduce investor confidence and therefore put downward pressure on V’s share price.
The effect is not automatic or guaranteed, but in a true/false question the statement that poor reputation can adversely affect share price would generally be true. This is why supply-chain labour practices are a strategic risk, not merely an operational issue.
Maseru, Lesotho

AI Explanation - verified by User1234 on: September 28, 2026
Question 12:
Correct answer: B. Port security
A MAC flooding attack sends many fake source MAC addresses to a switch. The goal is to fill the switch’s CAM/MAC address table, causing the switch to treat unknown traffic like a hub and broadcast it out many ports. This may allow an attacker to capture traffic.
Port security mitigates this by limiting which and how many MAC addresses can appear on a switch port. It can:

Allow only approved MAC addresses

Limit the number of learned addresses

Shut down or restrict a port when a violation occurs

Why the other options are less suitable:

Load balancer: Distributes application traffic; it does not protect switch MAC tables.

IPS: May detect some attack traffic, but it is not the direct control for limiting MAC addresses on switch ports.

NGFW: Filters routed network traffic, while this attack targets Layer 2 switch behavior.

The key clue is flooding the MAC address table, which points directly to switch port security.
Atlanta, United States

AI Tutor 👋 I’m here to help!

Cisco 350-901 Exam Prep Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 14 )

QUESTION: 60

QUESTION: 61

QUESTION: 62

Explanation:

QUESTION: 63

Reference:

QUESTION: 64

Reference:

Cisco 350-901 Exam Prep
Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 14 )