DRAG DROP (Drag and Drop is not supported)
Drag and drop the descriptions from the left onto the related OAuth-defined roles on the right.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Show Answer Next Question

QUESTION: 66

Refer to the exhibit. This cURL POST request creates an OAuth access token for authentication with FDM API requests.

What is the purpose of the file “@token_data” that cURL is handling?

This file is given as input to store the access token received from FDM.
This file is used to send authentication-related headers.
This file contains raw data that is needed for token authentication.
This file is a container to log possible error responses in the request.

Answer(s): C

Show Answer Next Question

QUESTION: 67

What is the result of a successful OAuth2 authorization grant flow?

The third-party service is provided with a token that allows actions to be performed.
The user has the application rights that correspond to the user's role within the application's database.
The application is provided with a token that allows actions on services on the user's behalf.
The user has administrative rights to the application's backend services.

Answer(s): C

Show Answer Next Question

QUESTION: 68

In the three-legged OAuth2 process, after the authorization server presents a form to the resource owner to grant access, what is the next step?

The resource owner authenticates and optionally authorizes with the authorization server.
The user who owns the resource initiates a request to the OAuth client.
If the resource owner allows access, the authorization server sends the OAuth client a redirection.
A form to allow or restrict access is submitted by the owner of the resource.

Answer(s): D

Show Answer Next Question

QUESTION: 69

Which OAuth mechanism enables clients to continue to have an active access token without further interaction from the user?

refresh grant
JWT
password grant
preshared key

Answer(s): A

Show Answer Next Question

Download PDF Next Page

Viewing page 18 of 78
Viewing questions 86 - 90 out of 507 questions

Post your Comments and Discuss Cisco 350-901 exam prep with other Community members:

Comments:

Name:

350-901 Exam Discussions & Posts
350-901 AI Verifications

Alex on: March 02, 2025
Great material
UNITED KINGDOM

rachelops on: July 22, 2026
I squeezed in exam prep between projects at work whenever I had a free moment. It took time, but this website helped me pass the exam eventually.
South Korea

OracleCertV on: June 14, 2026
I wasn't feeling too confident at first but the practice questions here helped a lot. The more I worked with them the better I understood what to expect for this exam.
South Korea

sshhero on: April 20, 2026
Passed it but barely. This exam was very hard even with brain dumps adn real exam questions.
Germany

commutestudier on: July 06, 2026
Spent way too much time on brain dumps after realizing how very hard this exam really was. Real exam questions were brutal but the AI Assistant made practicing tolerable.
Switzerland

WindowsWizard on: July 14, 2026
After long days at work I squeezed in short study sessions for this exam. Passing felt like a big relief and these questions were pretty spot on so that helped.
China

sophiedevops on: June 02, 2026
Passed it by a hair after stressing for weeks with brain dumps. This exm was very hard even with real exam questions.
South Korea

jakobvmware on: July 02, 2026
The exam covered way more than I thought so it was kind of a surprise. The AI assistant on this site helped fill in the gaps when I got stuck though.
Argentina

felixlinuxpro on: June 09, 2026
After long workdays fitting in short study sessions felt like a chore. Passing this exam was such a relief finally.
Brazil

alwayslearninga on: July 20, 2026
The exam was tough but the practice questions on this site were spot-on and got me through.
Switzerland

felixlinuxpro on: May 16, 2026
This exam was no joke but the prep questions here got me through it.
Pakistan

ZeroTrustZ on: June 10, 2026
Man this exam was tough but the prep stuff on this website kept my study schedule in check.
Egypt

harutodevops on: June 04, 2026
This exam was harder than I thought but going through the practice questions here helped a lot.
Singapore

tryhardtechie on: May 16, 2026
I thought this exam had way more topics than I expected so it was tough. But the practice questions here helped me tackle most of what came up which was a relief.
Colombia

AzureNinja on: June 15, 2026
This exam threw me with more stuff than I expected. But the prep here gave enough useful material to make it worth my time.
France

ServerlessSid on: July 24, 2026
Man this exam had stuff I didn't see coming. The AI assistant on this site made a difference but it was still tough.
Israel

CertStack2026 on: May 08, 2026
This exam was harder than expected but the practice questions on this website made it manageable.
Denmark

sshhero on: June 10, 2026
Nearly failed this exam as it was very hard and the stress was unreal but the brain dumps helped me scrape throgh eventually.
Kenya

jakobvmware on: April 26, 2026
Passed it using brain dumps but this exam was very hard and I was stressed the whole time.
Australia

pivottocloudp on: May 01, 2026
This exam was harder than I thought but using this website made it manageable.
Saudi Arabia

CiscoFanJ on: May 11, 2026
The exam was harder than I thought but the practice questions on this website made it manageable.
Egypt

homelabhero on: May 23, 2026
The exam was harder than expected but using practice questions from this website made it manageable.
United States

PassedOnThird on: June 12, 2026
At first, I wasn’t too confident about this exam. The practice questions on this website really helped me get more comfortable with the material.
Philippines

GCPengineerT on: July 02, 2026
The exam was very hard and I underestimated it so I spent hours with exam dumps and the AI Assistant to finally pass.
Norway

sophiedevops on: July 16, 2026
Didn't feel confident at first but the practice questions on this website definitely helped me learn a lot.
Argentina

TheCertMachine on: April 29, 2026
I was really unsure about taking the exam initially, but using the practice questions helped clarify a lot. With consistent work through this website, my understanding got way better over time.
Australia

priyadevops on: May 31, 2026
After juggling work and squeezing in short study sessions late at night the exam was a tough cookie to crack. But it's finally done and I feel relief washing over me big time.
Lithuania

WhyCertifyLol on: July 09, 2026
The exam was very hard but using exam dumps helped me understand the real exam questions. Just glad it's over.
Ireland

alwayslearninga on: June 22, 2026
The exam was tough but the prep on this site helped keep everything organized.
Indonesia

inescloudsec on: August 03, 2026
Crammed with relevant questions that saved me time and money I managed to get through the exam slowly but surely.
Austria

TerraformTom on: June 17, 2026
The exm dumps were a real lifesaver for this very hard exam but it still took all my focus to barely pass. Had to rely heavily on brain dumps and the real exam questions were still tricky.
Ireland

chrisinfosec on: May 30, 2026
Honestly the progress was slow at first but that's normal I guess. Gave myself plenty of review time with all those practice questions here. Passed in the end so it was worth it.
Australia

chiaradevsec on: May 28, 2026
This exam was a bit tougher than I expected but the practice questions on this website definitely helped keep it manageable.
Denmark

jhernandezit on: April 28, 2026
Took two attempts with the help of braindumps and the AI Assistant to finally pass this exam. Very hard experience but managed.
Pakistan

CyberArkC on: May 27, 2026
The exam was tough but those practice questions got me through.
Egypt

mateusawsbr on: June 24, 2026
The exam had stuff I didn't even know about geez it was tough. At least the AI assistant helped break down the extra material so not all bad.
Poland

PaperCCNA on: July 04, 2026
This exam was tough but the practice questions on this site made it manageable to pass.
Philippines

laidoffleveled on: June 21, 2026
I wasn't very confident initially but the practice questions on this website really helped me understand the concepts better.
United States

sophiedevops on: June 24, 2026
This exam threw a lot more at me than I was expecting so it was pretty tough. The AI assistant on this site helped break down some of the trickier bits making it less overwhelming.
Germany

harutodevops on: June 06, 2026
Passed it with the help of braindumps and the AI Assistant but the exam was very hard. Wasn't sure I would make it but those real exam questions turned out useful.
Kenya

laylaituae on: August 01, 2026
Was pretty worried about taking this exam because I didn’t feel ready at all. Practice questions on this website helped me fill in the gaps and get more confident.
United Kingdom

mateusawsbr on: July 04, 2026
Three weeks of cramming and the real exam questions were still a shock. The exam dumps were necessary to clear this very hard test.
Ukraine

upskillorbust on: July 09, 2026
This exam was tougher than I thought but the practice questions on this site definitely helped me manage.
UAE

inescloudsec on: June 11, 2026
This exam had a lot more detail than I expected which made it pretty tough. The practice questions here were on point though and helped me cover the important stuff.
Kenya

dmitrilinuxpro on: June 23, 2026
I wasn't feeling super confident about this exam at first. But digging into the practice questions on this website really helped me learn what I needed to know.
Estonia

lenaciscolab on: July 10, 2026
Trying to fit study into my hectic work schedule was no joke so I grabbed short sessions whenever possible. The relief of seeing relevant questions in the exam was huge man made it all worth it.
UAE

hamidcertguy on: July 31, 2026
This exam was tougher than I thought but with the practice questions here it was still doable.
Lithuania

SplunkSam on: June 28, 2026
I felt like I was making slow progress but this website kept me going. After reviewing the questions a few times I passed the exam in the end.
India

priyadevops on: July 18, 2026
This exam was so stressful but using this site made a difference. I'm just glad it's over and I passed.
Indonesia

lucasneteng on: July 24, 2026
The exam was a bit tougher than I thought but practice questions from this website made it doable.
Pakistan

AI Explanation - verified by User9198 on: July 28, 2026
Question 101:

The correct option is A: Data architecture.

Why: In the AWS CAF, the Platform perspective covers the technical foundation and architecture that enable cloud workloads to run reliably and efficiently. This includes how data is modeled, stored, and accessed across the enterprise—the core of data architecture.

Quick mapping for the other options:

- Data protection aligns more with the Security perspective (focus on encryption, access control, etc.). - Data governance aligns with the Governance perspective (policies, compliance, data ownership). - Data science isn’t primarily a Platform capability; it’s more related to analytics/business outcomes and may touch other perspectives.
Busan, South Korea

AI Explanation - verified by agrim.moudgil123 on: August 06, 2026
Question 1:
Question 1’s correct answers are B and D:

Enable the owner dimension

- The Owner inventory dimension identifies who owns the inventory—your company or the vendor. - This is required to distinguish company-owned inventory from consignment inventory for the same item.

Assign a standard costing inventory model

- Consignment inventory scenarios require the item to use an inventory model that supports the required ownership and cost treatment. In this question, that is standard cost.
Why the others are incorrect:

Batch dimension tracks batches or lots, such as expiration or production batches. It does not identify inventory ownership.

Moving average is a costing method, but it is not the required choice for this consignment configuration.

So, the answer key’s B and D is consistent with the expected Dynamics 365 SCM configuration.
Bengaluru, India

AI Explanation - verified by User9056 on: August 02, 2026
Question 19:
The correct choice is No (B).
Why:

The 99.99% availability SLA for VMs is achieved when you run VMs across two or more Availability Zones.

Two VMs in a single Availability Zone do not meet the 99.99% target (their SLA is lower, e.g., around 99.95% or less depending on configuration).

What to do to meet the goal with the minimum resources:

Deploy at least two VMs across two different Availability Zones (one VM in each zone, or both in two zones with a load balancer).

This provides the required zone redundancy and the 99.99% SLA.

Reference: https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
Maramag, Philippines

AI Explanation - verified by kapilthawani551 on: July 25, 2026
Question 48:
For question 48, the two efficient and scalable methods are:

ProductSearchModel.getProductSearchHits() — option C

ProductSearchHit.getRepresentedProducts() — option B

Why:

ProductMgr.queryAllSiteProducts() (A) queries every product in the site, which is heavy and not scalable for large catalogs.

Category.getProducts() (D) retrieves all products in a category; this can be slow for large categories.

Using the search model and hits (B and C) leverages the search index, supports paging, and avoids scanning the entire catalog, making it more scalable.

Note: The provided answer key on that page lists C and D, but based on SFCC concepts, B and C are the correct, scalable choices.
Kota, India

AI Explanation - verified by User9198 on: July 28, 2026
Question 103:

The correct option is B: AWS Storage Gateway.

Why: The scenario requires backing up on-prem data to AWS without changing existing backup workflows. AWS Storage Gateway provides a hybrid storage solution; specifically, the Tape Gateway emulates a physical tape library, allowing your existing backup software to write to virtual tapes that are stored in AWS (in S3 or S3 Glacier). This lets you back up 10 TB to the cloud while preserving current backup workflows and on-prem infrastructure.

How it would work: Deploy a gateway appliance or VM on-site, connect your tape-based backup software to the virtual tape library, and start writing to virtual tapes. The data is then archived in AWS, freeing up local storage.

Why the others aren’t suitable:

- Amazon EBS is cloud block storage and doesn’t fit on-prem backup workflows. - Amazon ECS is a container service, not a backup solution. - AWS Lambda is serverless compute, not a storage/backup service.

Quick tip: If you weren’t using tape, File Gateway could be another option for file-based backups; Tape Gateway is the right pick for tape-based workflows.

Busan, South Korea

AI Explanation - verified by User4606 on: July 22, 2026
Question 11:
Answer: A. Use AWS Secrets Manager with automatic rotation.
Why this is correct:

The app on EC2 connects to Aurora using DB credentials stored on the instance. Secrets Manager centralizes these credentials and can rotate them automatically, eliminating manual updates on each EC2 host.

Automatic rotation reduces operational overhead and enhances security because credentials are rotated on a schedule without code changes.

The app can retrieve the current secret at runtime (e.g., via the AWS SDK) and use it to authenticate to Aurora, avoiding reliance on locally stored files.

Why the other options are less suitable:

B (Parameter Store) can store secrets but lacks seamless built-in rotation for database credentials like Secrets Manager; rotation often requires more custom work.

C (S3) would require complex tooling to rotate and securely fetch credentials and still risks exposure if access policies aren’t perfect.

D (Encrypted EBS volumes) would store credentials locally on each instance and does not automate rotation or centralized management.

So the best fit for minimizing operational overhead while securely managing database credentials is Secrets Manager with automatic rotation.
Bangkok, Thailand

AI Explanation - verified by User7037 on: August 08, 2026
sample questions
I’m not able to generate new practice questions here — that’s part of the premium/full version, which includes a full question bank with verified answers.
I can still help you review the existing questions on this page, explain Fabric concepts such as lakehouses, pipelines, Direct Lake, Git integration, security, and Spark settings, or check whether a stated answer appears incorrect.
Livermore, United States

AI Explanation - verified by User7395 on: August 06, 2026
Question 16:
Correct answer: B — conceptualize and clarify requirements.
A prototyping approach creates an early, simplified version of the system so users and developers can see how it may work. Users can provide feedback, identify missing requirements, and resolve misunderstandings before full development begins.
Why the other options are weaker:

Improve QA testing efficiency: A prototype may help discover defects early, but that is not its greatest benefit.

Decrease time allocated for user testing and review: Prototyping usually requires additional user involvement and review, not less.

Minimize scope changes: Prototypes can actually reveal new requirements or cause scope changes. However, discovering those changes early is beneficial.

The key exam concept is that prototyping reduces requirements uncertainty by making abstract requirements more tangible and easier for users to evaluate.
Jersey City, United States

AI Explanation - verified by User7866 on: July 20, 2026
Question 51:

Correct answer: A — The degradation of a service.

Why: A service request is a formal request from a user for something that is pre-approved and routine (e.g., provisioning a laptop, replacing a toner cartridge). Those are typical service request actions. The degradation of a service, however, is an incident: it describes a problem affecting service quality or availability and is handled by Incident Management (and possibly Problem Management), not as a standard service request.

Quick note on the other options:

- B (replacement of a toner cartridge) and C (provision of a laptop) are classic service requests. - D (a complaint about a support team) is not a service request either; it would be handled through complaint/feedback channels, not as a service request.
Kuching, Malaysia

AI Explanation - verified by User4280 on: July 22, 2026
Question 6:
Question 6 asks how TCP and UDP establish a connection between two endpoints.
Correct answer: A — TCP uses the three-way handshake, and UDP does not guarantee message delivery.
Why:

TCP is connection-oriented. It establishes a connection before data transfer using a three-way handshake (SYN, SYN-ACK, ACK), enabling reliable delivery, ordering, and flow control.

UDP is connectionless. It sends datagrams without a prior connection and provides no guarantee of delivery, order, or protection against duplicates; any reliability is up to the application.

Why the other options are incorrect:

B incorrectly states UDP uses acknowledgment packets; UDP has no built-in ACKs.

C wrongly claims UDP provides reliable transfer and that TCP is connectionless.

D misstates framing bits; neither protocol uses the listed TCP/UDP handshake bits in frames.

Takeaway: TCP = reliable, connection-oriented with a handshake; UDP = best-effort, connectionless.
San Luis Obispo, United States

AI Explanation - verified by vivekmadugundu6 on: July 27, 2026
Question 82:
Question 82 asks: What are the four knowledge workflows available in the ServiceNow base instance?
The four workflows listed are:

Approval publish: Request approval from a manager of the knowledge base before moving the article into the publish state.

Instant Publish: Immediately publishes a draft article without requiring an approval.

Instant Retire: Immediately retires a published article without requiring an approval.

Retire Knowledge: Moves a knowledge article to the retired state.

Correct answer: A
Explanation:

These are the base knowledge workflows that control how articles move between states (Draft, Published, Retired) and whether approvals are required.

The other options describe different lifecycle actions, but these four cover the standard publish/retire workflows in ServiceNow.

Hyderabad, India

AI Explanation - verified by User3954 on: August 03, 2026
Question 231:
Question 231 asks how AAA maps to user identification, user services, and access control.

The correct AAA mapping (per Cisco objectives) is:

- Authentication identifies users - Authorization provides access control - Accounting tracks user services

Why the given options aren’t fully correct:

- Option B (the page’s claimed answer) says Authentication identifies users, and Accounting tracks user services. It omits the role of Authorization in enforcing access control, so it’s incomplete. - Option A incorrectly assigns user services to Authentication. - Option C assigns access control to Authentication and keeps Accounting for user services (partially correct but wrong overall). - Option D assigns identity to Authorization and access control to Authentication (both swapped).

Quick takeaway: when you configure AAA, you should conceptually map them as:

- Authentication for identity - Authorization for what the user is allowed to do - Accounting for usage tracking

Example commands (to reinforce concepts):

- aaa new-model - aaa authentication login default local - aaa authorization exec default local - aaa accounting exec default start-stop group
Harare, Zimbabwe

AI Explanation - verified by User1887 on: July 22, 2026
Question 20:

The correct answer is Mass Transfer Tool.

Why:

The Mass Transfer Records tool is Salesforce’s built-in way to reassign ownership of existing records in bulk. In this scenario, you need to transfer ownership of the departed rep’s accounts and opportunities to a new rep while keeping the team structure intact.

How to use it (high level):

Go to Setup > Data Management > Mass Transfer Records.

Choose the object: Accounts (and then Opportunities, if needed).

Set “Transfer From” (the leaving rep) and “Transfer To” (the new rep).

Decide whether to transfer related records as well (e.g., opportunities tied to accounts) and proceed.

Review and confirm.

Why not the other options:

Data Loader / Data Import Wizard are for bulk import/export, not bulk reassigning ownership.

Dataloader.io is a third-party tool; the built-in Mass Transfer tool is the standard Salesforce method for this task.

Milan, Italy

AI Explanation - verified by User2017 on: August 13, 2026
Question 13:
Correct answer: C — Security Roles
In Dataverse, access to a model-driven app is controlled through security roles. To let the sales team use the app:

Assign users or their team an appropriate security role.

Ensure the role has the required table privileges, such as read, create, write, and append.

Share the app with that security role in the app designer.

Why the other options are incorrect:

Dynamics administration center: Used for environment and service administration, not routine app access configuration.

Manage Roles: Not the specific Dataverse area used to define app and data permissions.

Security Roles: Define what users can access and which operations they can perform.

A key distinction: app visibility/sharing and Dataverse data access both rely on appropriate security-role assignments.
Alexandria, United States

AI Explanation - verified by User9941 on: July 24, 2026
Question 8:
Question 8 asks which statements about template BOMs are TRUE. The correct selections are usually A and C.

A) You can only apply a single template BOM to a service object.

- Why this is true: In Dynamics 365, a service item is typically associated with at most one BOM template at a time. You don’t apply multiple templates to the same service object, so this is a true constraint.

C) You can modify or delete lines in a BOM template regardless of whether the template has been associated to a service object, or not.

- Why this is true: BOM templates are editable templates. You can add, modify, or delete lines in the template even if the template has already been linked to a service object. Changes to the template affect future BOMs created from the template, not necessarily existing BOMs.
Why the others are false:

B) You can apply many template BOMs to a service object — false; typically only one template per service object.

D) You can modify/delete lines only if not associated — false; you can modify templates even after association (per C).

Note: Modifying a template may not retroactively change already created BOMs; use caution and test how changes propagate.
Bengaluru, India

AI Explanation - verified by User5172 on: July 24, 2026
Question 9:
Here’s how to approach Question 9 (the drag-and-drop):

Mapping:

- website hosting ? PaaS - a virtual machine that runs Linux ? IaaS - document storage that uses OneDrive for Business ? SaaS

Why:

- Website hosting on a managed platform (e.g., Azure App Service) abstracts OS and runtime management, so you focus on code—this is PaaS. - A Linux VM is an infrastructure you control (OS updates, software installed, patches), while the cloud provides the VM hardware—this is IaaS. - OneDrive for Business is a ready-to-use software service managed by the provider—this is SaaS.

Quick note: If you were to host a website on a VM, it would be IaaS; if you used a platform service instead of a VM, it would be PaaS. CaaS (containers) isn’t shown here.

Hyderabad, India

AI Explanation - verified by nanrany on: July 29, 2026
Question 187:
Here’s the explanation for question 187.

Correct answer: C. AWS CloudFormation

Why: CloudFormation lets you define infrastructure as code via templates (JSON or YAML). You can create a single template that describes multiple AWS resources and reuse it to deploy consistent stacks across environments. Templates can be parameterized and stored for repeated deployments. Other options (Marketplace, AMI, OpsWorks) don’t provide reusable deployment templates in the same way.

Busan, South Korea

AI Explanation - verified by User1325 on: August 03, 2026
The correct Microsoft exam answer is C. The second site (free-braindumps) is wrong in this case. Here’s why: Option C – GPO Startup Script ? * Startup scripts run every time the computer boots, before any user logs on. * They run under the Local System account, making them ideal for machine configuration. * In a domain where you’re creating multiple new VMs, linking a GPO to the OU means every new VM automatically receives the configuration. * This is the most scalable and centrally managed solution. Option A – SetupComplete.cmd ? %windir%\Setup\Scripts\SetupComplete.cmd runs only once, immediately after Windows Setup completes and before the first logon. Although it can be used to automate initial configuration, it’s intended for: * OEM deployments * Image customization * Sysprep deployments It’s not the best answer when you’re provisioning many domain-joined VMs in an Active Directory environment because: * It must exist inside every image or be copied during deployment. *
You're right—the correct answer is C.
Why C is best:

Startup scripts run at computer startup, before any user logs on, making them ideal for machine-wide configuration on each new VM.

They execute under the Local System account, which is appropriate for initial setup tasks.

Linking a GPO to the OU ensures every new VM in that domain automatically receives the configuration—great for scalability.

Why other options are less suitable:

A) SetupComplete.cmd runs only once, right after Windows Setup, not on every boot, so it isn’t ideal for provisioning multiple VMs consistently.

B) Logon scripts run per user, not per machine, so they aren’t reliable for initial VM configuration before a user signs in.

D) Placing scripts in a VHD doesn’t automatically execute them.

Amsterdam, The Netherlands

AI Explanation - verified by nanrany on: July 28, 2026
Question 137:
Question 137 explanation:

Correct options: C and D.

Why:

The AWS Cloud Adoption Framework (CAF) security perspective focuses on capabilities to protect information and manage security risk.

Observability (A) is primarily an operations/monitoring capability, not a core security capability under CAF.

Incident and problem management (B) is IT service management/operations, not specifically a CAF security capability.

Incident response (C) is a security-focused capability: detecting, containing, and recovering from security incidents.

Infrastructure protection (D) involves applying security controls to protect the underlying infrastructure, which fits the security perspective.

So the two security-perspective capabilities are Incident response and Infrastructure protection. If you’d like, I can map these to where they fit in other CAF perspectives too.
Busan, South Korea

AI Explanation - verified by User1410 on: August 10, 2026
Question 3:
The answer key shows A and E, but E is incorrect as written because it says to publish the agent before enabling Responsible AI filters. The question specifically asks what to do before making the agent available.
The better answers are:

A. Configure prompt modifications to enforce tone, disclaimers, and refusal behavior at the system level.

- This applies the required behavior consistently across topics and channels. - It avoids manually adding disclaimers to every topic.

D. Configure Power Platform DLP policies to restrict unauthorized data connectors.

- DLP policies provide environment-level data protection and help prevent unauthorized data movement through connectors. - They should be configured before deployment.
Why the other options are wrong:

B: Manual topic-by-topic disclaimer edits are specifically discouraged.

C: Channel settings do not replace agent-level Responsible AI controls.

E: Publishing before enabling safety filters violates the stated deployment sequence. Responsible AI filters should be enabled before publication, not afterward.

Lagos, Nigeria

AI Explanation - verified by User6589 on: August 03, 2026
Question 8:
Question 8 asks which improvement opportunity found at baseline can contribute to process maturity and strengthen the customer’s overall security posture.

Post-Incident Review (A) is the after-action step used to capture lessons learned, identify process gaps, and drive improvements across the incident response lifecycle. This directly supports process maturity and a stronger security posture.

Incident Analysis (D) focuses on investigating root causes during/after an incident, which is important but more of a diagnostic activity than a standalone baseline improvement to maturity.

Fast Eradication (B) and Incident Containment (C) are tactical actions aimed at stopping the incident, not on maturing the process.

Note: The page lists D as the answer and the reference link seems unrelated to this question, which suggests an error in the provided key. Based on typical ServiceNow security incident objectives around continuous improvement, Post-Incident Review (A) is the better fit.
Hyderabad, India

AI Explanation - verified by User2168 on: July 22, 2026
Question 22:
Question 22 asks: In a Cisco SD-Access fabric, which control plane protocol is used for mapping and resolving endpoints?
Answer: D — LISP
Explanation:

The mapping and resolution of endpoint identities (EIDs) to their location (RLOCs) in an SD-Access fabric is handled by the control plane using the LISP protocol.

Why not the others:

- DHCP is for IP address assignment, not endpoint mapping. - VXLAN is the data-plane encapsulation used by the overlay, not the control-plane mapping protocol. - SXP is not the standard protocol used for endpoint mapping in SD-Access.
In short, SD-Access relies on LISP for dynamically mapping endpoints to their location in the fabric. If you want more detail on how EID-to-RLOC mapping works in SD-Access, I can walk through the mapping process.
D'iberville, United States

AI Explanation - verified by User1861 on: August 07, 2026
Question 2:
???????? C: Statistical metrics measuring capacity utilization (????????????????????????????????????????)
????????? ???????????? computer performance ?????????????????????????????????? ????

?????? CPU

?????????????????

??????????????????????????

???????????? throughput

??????????????????????????????

??????????????????????????????????????????????????????????????????????????????????????????
????????????:

A ??????? system software ????????????????????????????????? ??????????????????????????????????

B ?????????????????????????? ????????????????????????? ?????????????????????????????

D ????????????????????????? ?????????????? ?????????????????????????????????????????

??????: ???????????? ???????????????????? ????????????????????? ????????????????? ???????? metrics ??????????????????.
Din Daeng, Thailand

AI Explanation - verified by nanrany on: July 31, 2026
Question 338:

Answer: S3 Inventory report.

Why: The S3 Inventory report provides a scheduled listing of objects within a bucket, including metadata about each object. When you configure it to include object tagging, you can see tags for each object, and the object keys (which reflect prefixes) and bucket scope are captured in the report. This makes it suitable for auditing and tracking “tags, buckets, and prefixes” across S3 objects.

What the other options do (not suitable for this purpose):

- S3 Lifecycle automates transitions and expirations, not a comprehensive object listing. - S3 Versioning records object versions, not a full inventory of objects and tags. - S3 ACLs manage access permissions, not object metadata or tagging inventory.

Tip: If you need tags in the report, enable the inventory option to include object tagging in the configuration.

Busan, South Korea

AI Explanation - verified by User2395 on: August 02, 2026
Question 32:
Question 32 asks which trait of crisis management is most appropriate in a DR test. The correct answer is Process.

Why: Crisis management relies on established, repeatable procedures for responding to an incident (activation of the crisis team, escalation paths, communications, containment actions). This ensures a coordinated, timely, and auditable response.

Why not the others:

- Anticipate is more about proactive risk assessment and preparedness, not the real-time crisis response. - Strategic and Wide focus relate to long-term planning or enterprise-level considerations, not the immediate crisis-handling activities during a DR test.
In short, crisis management in a DR context is about executing defined processes to manage the incident effectively. If you want, I can relate this to a sample crisis management playbook or walk through how a DR exercise would be run.
Washington, United States

AI Explanation - verified by User9758 on: July 25, 2026
Question 147:
Question 147 asks which enterprise security capability best detects employees accessing systems and data unrelated to their duties.

Correct answer: UBA (A)

Why: UBA (User Behavior Analytics) analyzes user activity, builds baselines of normal access patterns, and flags deviations (e.g., accessing sensitive projects not related to the user’s role). This insider-threat detection is exactly what the scenario requires.

Why not the others:

- EDR focuses on endpoint malware/host threats, not broad user access behavior. - NAC controls device/network access, not ongoing monitoring of which resources a user accesses. - DLP prevents data leakage but doesn’t primarily detect who is accessing data or deviating from normal access patterns.
Tip: Look for the option that monitors and flags unusual user behavior rather than focusing on devices, data content, or endpoint threats.
Virginia Beach, United States

AI Explanation - verified by User1865 on: August 11, 2026
Question 1:
Correct answer: A — Consult the risk register for an appropriate planned risk response and implement it.
The risk was identified during planning, and it has now occurred: the technical resource is unavailable. The project manager should therefore:

Review the risk register.

Use the previously defined risk response plan, such as assigning a backup resource, reprioritizing work, or using another qualified engineer.

Implement the response promptly because the task is on the critical path.

Why the other options are weaker:

B: Revising the schedule without first applying the planned response may be premature.

C: Excluding a required task could compromise the project’s objectives and requirements.

D: Updating the risk and lessons learned records is appropriate, but it should happen after managing the immediate issue, not as the next primary action.

This tests the distinction between a risk that is merely possible and an issue, where the risk has materialized and the planned response should be executed.
Kuala Lumpur, Malaysia

AI Explanation - verified by User5015 on: July 22, 2026
Question 10:
Question 10 asks if migrating all VMs to an Azure pay-as-you-go subscription uses the “elastic expenditure model.”
Here’s the right way to think about it:

In Azure, the typical cost approach for pay-as-you-go VMs is an Operational Expenditure (OPEX) model. You’re billed for actual usage each month.

The term “elastic expenditure model” isn’t a standard Azure cost category. Elasticity describes scaling capacity, not the billing category itself.

So recommending the elastic expenditure model is not correct for this goal.

Conclusion:

The solution does not meet the goal. Answer: No (B).

Why this matters:

Pay-as-you-go aligns with OPEX because costs vary with usage.

Elasticity is about scaling resources, which affects performance and capacity, not the fundamental cost model.

If you want, I can compare this with the other questions in this set (11 and 12) to highlight how the correct expenditure models differ in each scenario.
San Antonio, United States

AI Explanation - verified by User1610 on: July 19, 2026
Question 70:
I can’t see the hotspot image for Question 70. Please paste the text of the statements (the Yes/No items) or describe them, and I’ll walk through which are true and why.
In the meantime, quick tips for Azure hotspot questions:

Each statement is evaluated as True (Yes) or False (No) independently.

Key Azure facts to recall:

- A resource can exist in only one resource group. - A resource group is a management container for resources and can include resources from multiple regions. - Billing/scoping is typically at the subscription level, not constrained by a single resource group. - Resource groups contain metadata about contained resources, not the resources themselves.
Share the actual statements, and I’ll apply these concepts to determine the correct Yes/No for each.
Gurugram, India

AI Explanation - verified by User9425 on: August 05, 2026
Question 3:

Answer: D

Explanation:

The strongest security comes from enforcing access at the storage layer. An IAM policy scoped to the Cognito identity prefix restricts each user to their own S3 prefix (folder), so users can only access their own files regardless of client or server code.

This per-user isolation reduces risk of cross-user data access and is more robust than UI validation or Lambda/API validation alone.

Implementation note: attach a policy to the Cognito identity role that allows actions on arn:aws:s3:::your-bucket/${cognito-identity.amazonaws.com:sub}/* (per-user prefix). Ensure TLS in transit and enable at-rest encryption (SSE-S3 or SSE-KMS). Use multipart upload for large files up to 300 MB.

Lagos, Nigeria

AI Explanation - verified by User9126 on: July 22, 2026
Question 9:

Correct answer: B — A reservation for the server based on the MAC address.

Why this is the best choice:

- A DHCP reservation ties a specific IP address to the server’s MAC address. The server will always receive the same IP while still using DHCP, which is easy to manage and avoids manual static configurations on the server. - This helps prevent IP conflicts and allows DNS/DHCP integration to stay consistent (e.g., dynamic DNS updates you might rely on with DHCP).

Why the other options are less suitable:

- A) A separate scope for the file server using a /32 subnet — A /32 subnet is not practical for IPv4 subnets in a typical DHCP scope; separate scopes aren’t needed just for a single server. - C) A static IP address within the DHCP IP range — This can lead to IP conflicts if another device is assigned the same IP; better to keep a reservation inside the DHCP scope or use an address outside the DHCP pool. - D) SLAAC for the server — SLAAC is IPv6 auto-configuration and doesn’t align with a DHCP-managed IPv4 environment (and servers usually require stable addresses regardless of IPv6 specifics).

Quick takeaway: Use a DHCP reservation to give the file server a fixed IP while still benefiting from centralized DHCP management.

Frankfurt Am Main, Germany

AI Explanation - verified by User7851 on: August 05, 2026
Question 8:
Correct answer: A — the Microsoft Defender portal
To review the impact of a phishing incident, use the Microsoft Defender portal (security.microsoft.com). It provides security investigation and threat-response tools, including:

Incidents & alerts — see how the phishing activity was detected, correlated, and investigated.

Threat Explorer — search for the malicious messages, recipients, URLs, attachments, and campaign activity.

Email and collaboration reports — assess how many users or messages were affected.

Remediation details — verify whether messages were quarantined, removed, or otherwise contained.

The other portals are not the best choice:

Microsoft 365 admin center — general tenant administration.

Microsoft Entra admin center — identity and access management.

Exchange admin center — mail-flow and Exchange configuration, rather than full phishing-incident investigation.

The key exam distinction is that security incidents and phishing impact analysis belong in Microsoft Defender, not the general administration portals.
Barrie, Canada

AI Explanation - verified by User3575 on: August 05, 2026
Question 3:
I can’t see the interactive hot spot image, so I can’t tell which host to click. But here’s how Question 3 is meant to be approached and why.

Goal: Identify the host that originated the infection, then label each remaining host as infected or clean based on log evidence.

Logs to review (across hosts and firewall):

- Firewall/NIDS/IPS logs for unusual outbound connections, new ports, or unusual destinations. - DNS logs for suspicious domains or rapid repeat queries. - Host event logs (process creation, network connections, user logons). - Endpoint security logs/EDR for malware indicators or beaconing. - Proxy logs for unusual external access from internal hosts.

How to identify the origin:

- Look for the earliest, abnormal activity that could seed the infection (e.g., a host contacting a known bad IP/domain, or a suspicious file dropped on initial access). - Correlate time stamps across hosts to find a common point of compromise. - Detect signs of lateral movement starting from that origin (e.g., anomalous SMB/RDP activity).

How to classify other hosts:

- Infected: hosts showing correlated indicators (beaconing, same C2 domain, shared tooling, new/unknown processes). - Clean: hosts with no anomalies and no connections to the same malicious indicators in the same time window.

Quick tip: use the Reset All option if you want to re-run the scenario and practice again.

If you describe which hosts/firewalls show what in the logs, I can help reason through which one is likely the origin and which hosts are infected or clean.
Norcross, United States

AI Explanation - verified by User5640 on: August 10, 2026
Question 99:
No.
Two VMs placed in one availability zone do not provide protection against a zone-level failure. The deployment would still depend on that single zone, so it cannot meet the 99.99% VM availability SLA.
The minimum suitable design is:

Two VMs

Distributed across two separate availability zones

Therefore, the solution does not meet the goal. The answer key’s B (No) is correct.
Sandton, South Africa

AI Explanation - verified by User8155 on: July 23, 2026
Question 2:
Skupmy sie na trybie SERIALIZABLE w pytaniu 2.

Co to znaczy: transakcje zachowuja sie tak, jakby byly wykonywane jeden po drugim. Dzieki temu nie ma brudnych odczytów, niepowtarzalnych odczytów ani phantom reads.

Implementacja: PostgreSQL uzywa SSI (Serializable Snapshot Isolation). W praktyce oznacza to, ze jesli wykryje konflikt miedzy transakcjami, jedna z nich zostanie zakonczona bledem “serialization failure” i trzeba ja ponowic.

Przyklad (phantom read i serializowalnosc):

Zalózmy tabele orders(customer_id int, amount int).

Transakcja T1:

- BEGIN; - SELECT COUNT(*) FROM orders WHERE customer_id = 42; - -> powiedzmy zwraca 5.

Transakcja T2, równoczesnie:

- BEGIN; - INSERT INTO orders (customer_id, amount) VALUES (42, 100); - COMMIT;

T1 ponownie wykonuje to zapytanie:

- SELECT COUNT(*) FROM orders WHERE customer_id = 42; - W trybie READ COMMITTED widzialoby 6. - W trybie SERIALIZABLE system stara sie utrzymac wynik zgodny z jakims czystym porzadkiem serialnym; jesli realizacja prowadzi do niezgodnosci, jedna transakcja zostanie zakonczona bledem serialization_failure, a T1 (lub T2) moze byc ponownie uruchomiona.
Wiecej: w PostgreSQL taki blad ma zazwyczaj komunikat “could not serialize access due to read/write dependencies” (SQLSTATE 40001) i wymaga ponownego uruchomienia transakcji.
Warsaw, Poland

AI Explanation - verified by User6701 on: August 10, 2026
Question 1:
Correct answer: A — Configure SetupComplete.cmd in %windir%\setup\scripts.
SetupComplete.cmd is a Windows Setup mechanism that runs automatically after Windows installation or deployment finishes. It can call your PowerShell scripts, for example:

cmd powershell.exe -ExecutionPolicy Bypass -File C:\Scripts\Configure-VM.ps1

This is appropriate when preparing a VM image or deploying multiple VMs that require the same post-installation configuration.
Why the other options are less suitable:

GPO logon script: Runs only when a user logs on, so configuration may be delayed and is user-dependent.

GPO startup script: Can work, but requires the VMs to be domain-joined and introduces GPO dependency. It is not specifically tied to Windows deployment.

Place scripts in a VHD: Merely makes the files available; it does not execute them.

Important correction: The supplied explanation discusses Azure Custom Script Extension, which does not match this question’s on-premises Hyper-V scenario. The answer key’s A is reasonable, but that explanation appears to belong to a different Azure VM question.
Amsterdam, The Netherlands

AI Explanation - verified by User6887 on: July 24, 2026
Question 96:
I can’t see the [Image] in question 96, but I can explain the concept and how to map IPv6 addresses like this.

IPv6 address types you’ll typically see:

- Global unicast: starts with 2000::/3 (the “global” Internet routable range) - Unique Local Address (ULA): fc00::/7 overall, with fd00::/8 used for locally assigned ULAs - Link-local: fe80::/10 (only on a single link) - Multicast: ff00::/8 - Loopback: ::1

Unique Local Addresses (ULAs)

- Purpose: private addresses for sites, not routable on the public Internet - Common prefix used: fd00::/8 (locally assigned ULAs) - They’re the IPv6 equivalent of private IPv4 ranges (like 10.0.0.0/8)
How to map in the drag-and-drop:

If an address begins with fdXX:… or fc00:…, place it under “Unique Local Address” (ULA).

If it begins with 2000::/3, place it under “Global Unicast.”

If it begins with fe80::, place it under “Link-local.”

If it begins with ff00::, place it under “Multicast.”

If you share the exact addresses on the left and the right-hand labels, I’ll walk you through the exact mapping step by step.
Thiruvananthapuram, India

AI Explanation - verified by User1052 on: August 12, 2026
Question 21:
Question 21’s images contain the answer-area options, so I can’t map the exact selections. However, the intended solution is likely:

Create Power Query parameters for the Azure SQL server/database—or at least the database name.

Use the parameter in the PBIX connection.

Publish the same PBIX separately to the relevant development, test, and production workspaces.

Set each dataset’s parameter value in the Power BI service so it points to the corresponding Azure SQL database.

For example:

Development dataset ? DevelopmentDB

Test dataset ? TestDB

Production dataset ? ProductionDB

This satisfies the requirements because:

The same PBIX is used for every lifecycle stage.

Each stage consumes data from its matching database.

Deployment pipelines are not required.

Azure SQL is a cloud source, so gateway administration is generally avoided.

Only the parameter value differs between published datasets, reducing maintenance.

The answer key shows A, but the exact hotspot selections cannot be verified without the missing images. The key concept is Power Query parameters with separate published datasets configured for each environment.
Petaling Jaya, Malaysia

AI Explanation - verified by User5592 on: July 22, 2026
Question 4:

Answer: D) Shadow IT

Why: Shadow IT is when employees use unsanctioned tools or bypass IT controls (like the VPN) to access services, often without IT oversight. It’s an internal behavior, not an external attacker’s activity.

Not these:

- A) Espionage — covert info gathering by attackers. - B) Data exfiltration — unauthorized data transfer, usually by an attacker. - C) Nation-state attack — attack by a state-sponsored actor.

Quick note: This creates risk due to lack of visibility and control. Mitigations include a defined approved-tools list, enforcing VPN usage, device management, and continuous monitoring.

Vila Velha, Brazil

AI Explanation - verified by User7748 on: July 29, 2026
What is terraform remote backend
A remote backend is a Terraform backend that stores your state and runs Terraform operations in a remote service (typically Terraform Cloud or Terraform Enterprise) rather than on your local machine.
Key points:

State is stored remotely in Terraform Cloud/Enterprise, not as a local file.

Terraform runs (plan/apply) can be executed on remote infrastructure, with results visible in the remote workspace UI.

Supports workspace-based organization, state locking, and concurrency control.

Useful for team collaboration, centralized governance, and auditable logs.

How it’s configured:

In your configuration, you use a backend block like backend "remote" { ... }.

You still run terraform init to configure/migrate to the remote backend.

After setup, terraform plan/terraform apply may be executed remotely, and the outputs/logs appear in the Terraform Cloud/Enterprise UI rather than (only) in your local terminal.

Difference from other backends (e.g., S3, Consul):

Other backends store state remotely but typically do not provide remote execution; with the remote backend you get remote runs and a collaborative UI, not just remote state storage.

Hyderabad, India

AI Explanation - verified by sarahseyifunmi on: August 07, 2026
Question 155:
Correct answer: B — deploy AWS IoT Greengrass on the local Linux server.
Why:

AWS IoT Greengrass supports local ML inference using models trained in Amazon SageMaker.

The model and inference code run on the factory’s local server, so processing continues even when internet connectivity is unavailable.

A Greengrass component can:

1. Capture still images from the IP cameras. 2. Run the model locally. 3. Call the local feedback API when it detects a defect.

This provides low latency and avoids sending images to AWS for every inference.

Why the other options are incorrect:

A: Uses AWS-hosted services and therefore depends on internet connectivity. It would fail during an outage.

C: Snowball Edge is unnecessary for this use case and adds deployment complexity. A local Greengrass server is the intended edge-inference solution.

D: Amazon Monitron is designed for monitoring industrial equipment health, not analyzing camera images with a custom SageMaker model.

The key clues are local processing, continued operation during an internet outage, and an existing on-premises Linux server.
Lagos, Nigeria

AI Explanation - verified by is.chan.army on: August 03, 2026
Question 38:
Question 38 asks: What is the most recent NIST standard for incident response?

Options:

- A: 800-61r3 - B: 800-61r2 - C: 800-53r3 - D: 800-171r2

Answer: The correct choice is A (800-61r3).

Why:

NIST SP 800-61 Rev. 3 is the dedicated guide for incident handling/response and reflects the latest guidance on the incident response lifecycle (preparation, detection/analysis, containment, eradication, recovery, post-incident activity).

800-61r2 is an older revision of the same incident response guide.

800-53 covers security and privacy controls, not a specific incident response standard.

800-171 focuses on protecting CUI in non-federal systems and networks, not incident response guidance.

Note: The provided answer key says C, which is incorrect based on current NIST standards. If you want, I can summarize what’s new in 800-61 Rev. 3.
Tamarac, United States

AI Explanation - verified by User7070 on: July 17, 2026
Question 3:
Question 3 asks whether upgrading to a support plan would allow Microsoft to provide an assessment of your Azure environment’s design, given Basic does not include this.
Key points:

Basic support does not include architectural/design assessments.

Premier support includes advisory services such as architectural reviews/design assessments.

Conclusion:

The solution (subscribe to Premier support) does meet the goal. The correct choice should be Yes (A).

The provided answer key showing B (No) is likely incorrect for current Azure support plans.

If you’re studying, remember: use Premier (or other plans with architecture/design review features) when you need an official design assessment from Microsoft.
Delhi, India

AI Explanation - verified by User8963 on: July 26, 2026
Question 13:
Question 13 asks which are the key architecture domains.

The standard Enterprise Architecture domains are: Business, Data, Application, Technology (BDAT).

Option analysis:

A: Business, strategy, application and technology — includes business and application/tech but uses “strategy” instead of data.

B: Zachman, TOGAF, Cobit, and Heath architectures — names frameworks, not domains.

C: Business, data, infrastructure and technology — has business, data, and technology; lacks a distinct application domain (uses “infrastructure” instead).

D: Process, database, software and technology — covers data (database), application (software), and technology, but omits business.

Notes:

The four BDAT domains (business, data, application, technology) is the conventional model you should study.

None of the options perfectly lists all four BDAT domains. The closest are C (if you map infrastructure to technology) and D (data/application/technology but no business).

The answer key here (D) seems questionable; the core concept to know is BDAT.
Nuenen, The Netherlands

AI Explanation - verified by User8118 on: August 12, 2026
Question 17:
Correct answer: B — Enabling malware detection through a UTM
A public website that accepts PDF uploads should inspect those files for malicious code, embedded exploits, and malware before allowing them into the environment. A UTM (Unified Threat Management) device can provide integrated security functions, including antimalware scanning, at the network boundary.
Why the others are less suitable:

A — IDS attack signatures: An IDS generally detects suspicious network activity but does not necessarily scan uploaded PDF files or prevent them from being accepted.

C — Load balancer: Distributes traffic among servers; it does not inspect files for malware.

D — WAF command-injection blocking: A WAF can help block web attacks such as command injection, SQL injection, and cross-site scripting, but this option does not specifically address malicious PDF uploads.

In practice, secure upload handling would also include file-type validation, sandboxing, size limits, malware scanning, and storing uploads away from executable web directories.
Kabul, Afghanistan

AI Explanation - verified by enbore2015 on: August 07, 2026
Question 1:
Correct answer: A — The BCP has not been tested since it was first issued.
A business continuity plan is only useful if it is current, workable, and proven through testing. Without testing, the organization cannot know whether:

Recovery procedures actually work

Recovery time and recovery point objectives can be met

Staff understand their responsibilities

Contact details, dependencies, and technical configurations are accurate

Gaps or conflicts exist in the plan

The other issues are important but generally less severe:

Not version-controlled: Creates a risk of using an outdated copy, but the plan might still be effective.

Contact information needs updating: This is a specific weakness that can be corrected, often identified during testing.

Not approved by senior management: Approval is important for authority and resource commitment, but an untested plan presents the most direct risk that recovery will fail when needed.

The exam principle is: testing provides assurance that the BCP is effective, not merely documented.
Nairobi, Kenya

AI Explanation - verified by agrim.moudgil123 on: August 03, 2026
Question 2:

Correct answer: B (No, it does not).

Why:

A purchase agreement in Dynamics 365 SCM is a vendor-side price arrangement. It sets prices/discounts for what your company buys from suppliers, not for what you sell to customers.

The objective in Question 2 is to give clients a quantity-based discount on items they purchase from you. To accomplish this, you should configure a sales price / trade agreement (on the customer/sales side), not a purchase agreement.

In a sales price trade agreement, you can define quantity breaks such as:

- 51–100 units: 10% discount per unit - 101+ units: 15% discount per unit This applies to customers, not to your costs.
How to implement (high level):

Create a Sales price trade agreement for the item and relevant customer (or customer group).

Add quantity breaks: 51–100 with 10% discount, 101+ with 15% discount.

Ensure the agreement is active for the desired date range.

Bengaluru, India

AI Explanation - verified by User4084 on: August 03, 2026
Question 10:
Question 10 asks whether recommending the “elastic expenditure model” for migrating VMs to an Azure pay-as-you-go subscription meets the goal. The provided answer (B) is No.
Why:

Pay-as-you-go in Azure is an operating expense (OPEX) model, not an “elastic” expenditure model.

Elastic or scalable terms describe capacity planning, not the cost category. The cost should be treated as OPEX since you pay for usage each month.

The parallel question (Question 12) shows the correct approach is using an operational expenditure model.

So, the solution in Question 10 is incorrect; the correct expenditure model is operational expenditure (OPEX).
Stockton-On-Tees, United Kingdom

AI Explanation - verified by User9769 on: August 06, 2026
Question 10:
Correct answer: A — PKI
X.509 certificates are digital certificates used primarily within a Public Key Infrastructure (PKI). They bind an identity—such as a user, server, or organization—to a public key and are digitally signed by a trusted certificate authority.
Common uses include:

Authenticating websites with TLS/HTTPS

Enabling certificate-based VPN authentication

Signing or encrypting email

Supporting device or user authentication

Why the other options are incorrect:

VLAN tagging: Uses network-frame tags, such as 802.1Q; it does not rely on X.509 certificates.

LDAP: May integrate with PKI in some environments, but X.509 certificates are not most commonly associated with LDAP itself.

MFA: Certificates can be one authentication factor, but X.509 is fundamentally a PKI technology.

Morrow, United States

AI Explanation - verified by nanrany on: July 29, 2026
Question 176:
The correct answer is AWS Application Discovery Service.

Why: ADS is designed to collect information about on-premises environments to plan migrations. It inventories details like hostname, IP address, MAC address, OS, hardware, and installed software, plus dependency mappings. This data helps you understand your current environment before moving to AWS.

How it differs from the other options:

- AWS DataSync focuses on transferring data between on-prem and AWS, not providing a network/inventory view. - AWS Application Migration Service (MGN) helps migrate workloads but isn’t primarily used for discovering on-prem inventory. - AWS Database Migration Service moves databases, not general host information.

Practical use: Install the ADS agent on on-prem hosts to collect data, then view the inventory in Migration Hub to inform migration planning and sequencing.

Busan, South Korea

AI Tutor 👋 I’m here to help!

Cisco 350-901 Exam Actual Questions Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 18 )

QUESTION: 65

Explanation:

QUESTION: 66

QUESTION: 67

QUESTION: 68

QUESTION: 69

Cisco 350-901 Exam Actual Questions
Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 18 )