DRAG DROP (Drag and Drop is not supported)
Drag and drop the descriptions from the left onto the related OAuth-defined roles on the right.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Show Answer Next Question

QUESTION: 66

Refer to the exhibit. This cURL POST request creates an OAuth access token for authentication with FDM API requests.

What is the purpose of the file “@token_data” that cURL is handling?

This file is given as input to store the access token received from FDM.
This file is used to send authentication-related headers.
This file contains raw data that is needed for token authentication.
This file is a container to log possible error responses in the request.

Answer(s): C

Show Answer Next Question

QUESTION: 67

What is the result of a successful OAuth2 authorization grant flow?

The third-party service is provided with a token that allows actions to be performed.
The user has the application rights that correspond to the user's role within the application's database.
The application is provided with a token that allows actions on services on the user's behalf.
The user has administrative rights to the application's backend services.

Answer(s): C

Show Answer Next Question

QUESTION: 68

In the three-legged OAuth2 process, after the authorization server presents a form to the resource owner to grant access, what is the next step?

The resource owner authenticates and optionally authorizes with the authorization server.
The user who owns the resource initiates a request to the OAuth client.
If the resource owner allows access, the authorization server sends the OAuth client a redirection.
A form to allow or restrict access is submitted by the owner of the resource.

Answer(s): D

Show Answer Next Question

QUESTION: 69

Which OAuth mechanism enables clients to continue to have an active access token without further interaction from the user?

refresh grant
JWT
password grant
preshared key

Answer(s): A

Show Answer Next Question

Download PDF Next Page

Viewing page 25 of 78
Viewing questions 121 - 125 out of 507 questions

Post your Comments and Discuss Cisco 350-901 exam prep with other Community members:

Comments:

Name:

350-901 Exam Discussions & Posts
350-901 AI Verifications

Alex on: March 02, 2025
Great material
UNITED KINGDOM

Heap on: June 24, 2026
The exam threw in more than I expected but the AI assistant on this site really helped. Made understanding the tricky parts a bit easier.
Sweden

Sudoer on: June 30, 2026
Felt lost at first but practice questions helped.
Panama

Backplane on: September 04, 2026
Didn't feel confident but practice helped.
Cyprus

Microcode on: September 09, 2026
This site was great for cramming and saving me time and money as I slowly worked through these questions and nailed the exam.
Norway

CoreDump on: August 11, 2026
This exam was tougher than I thought but practice questions made it manageable.
Mexico

Zsh on: July 01, 2026
So stressful but exam prep helped. Glad I used it.
Netherlands

remoteandcertified on: July 28, 2026
Juggling work and study for this exam was exhausting but squeezing in those short study sessions really made a difference. I finished the test feeling relieved and all that grind paid off.
Belgium

Fiber on: September 01, 2026
I was not sure at first but practice questions really help me learn for this cert.
France

Osama Jat on: September 22, 2026
Me Osama Jat. Please give me provide CCNA real question. hepl in the ccna real exam.
Biratnagar, Nepal

Pdu on: August 04, 2026
Did this cert between work and kinda glad it's done.
Canada

Nullptr on: August 01, 2026
Too tired to study much relieved passed.
United States

Tcpdump on: June 24, 2026
The exam was tougher than I thought but the practice questions on this website helped me get through it.
Liechtenstein

Microcode on: June 30, 2026
I took my time with the prep on this website and eventually felt confident enough to pass after slow but steady progress.
Canada

Loopback on: September 13, 2026
Saved me time and money cramming super slow got through the exam.
Luxembourg

Rootkit on: June 18, 2026
Tough week at work but passing was sweet relief.
United Kingdom

Henry on: September 05, 2026
Question 3 has an incorrect answer. The question "________ is used to identify, hold, and export electronic information that might be used in an investigation." should be eDiscovery, not Customer Lockbox. Customer Lockbox is for a customer to give data access to Microsoft engineers.
London, United Kingdom

CoffeeAndCerts on: July 22, 2026
This exam was tougher than I thought but with some practice questions it's doable.
Lithuania

Symlink on: July 09, 2026
This cert helped me cram fast save some time and cash plus slowly nail the exam.
Spain

Tty on: July 11, 2026
Man this exam was tough but these questions on the site got me through it.
Estonia

PktLoss on: July 25, 2026
The exam was crazy stressful. The practice questions here definitely helped a lot.
Ireland

Synack on: June 16, 2026
Worked all day crammed a bit at night passed the exam boom.
Japan

Stderr on: August 12, 2026
Balancing work and study sessions for this exam was exhausting but I'm so relieved it's over.
Switzerland

Hardlink on: August 01, 2026
Wow that exam was crazy stressful. Good thing these questions were on point.
South Korea

Regex on: June 13, 2026
Exam was tough but prep questions saved me.
Denmark

Paging on: July 18, 2026
That exam was a monster but practice questions here eased the stress. I felt sorta ready thanks to this prep.
Netherlands

Uptime on: July 05, 2026
Yo this exam was rough but legit the AI assistant helped me smash it. Didn't expect all those topics tho glad I prepped on this website.
Sweden

Backplane on: August 16, 2026
Crammed with the AI assistant on this site saved me time and money and boom passed the exam slowly but steady.
Germany

bootcampgradb on: June 06, 2026
Balancing work with study was tough but this site made short sessions easier. Done now and can say the AI assistant really helped me pass the exam.
UAE

Bitmask on: July 05, 2026
Did exam prep in between work relief after finishing.
Italy

Sanjay on: September 04, 2026
Ans to Question 164 should be --Integrate information security governance into corporate governance Why? The best way to align security and business strategies is to ensure that information security governance is integrated into corporate governance. This ensures that security objectives, investments, risks, and initiatives are directly linked to business goals, strategic planning, and enterprise risk management. When security governance is part of corporate governance: • Security supports business objectives. • Security risks are considered alongside business risks. • Executive management and the board provide oversight. • Security initiatives are prioritized based on business value. Why the other options are less appropriate? ? 1) Include security risk as part of corporate risk management This is important, but it addresses only the risk management aspect and not the broader alignment of security strategy with business strategy. ? 2) Develop a balanced scorecard for security A balanced scorecard helps measure performance but does not, by itself, create strategic alignment. ? 3) Establish KPIs for business through security processes KPIs measure effectiveness and performance but are a result of alignment, not the primary mechanism for achieving it. ISACA/CISM Perspective A fundamental principle of information security governance is that it should be fully integrated with corporate governance to ensure security supports business objectives and delivers value to the organization.
Bengaluru, India

Tcpdump on: July 10, 2026
Passed the exam after slow prep.
Qatar

Pip on: June 28, 2026
This exam tough but manageable.
United States

VlanId on: August 03, 2026
The exam had more stuff than I thought it would. AI assistant on this site made prep easier.
Latvia

Fiber on: August 29, 2026
Balancing work and studying was tough but getting through the exam with short study sessions was such a relief.
Ireland

Segfault on: August 26, 2026
Juggling work and short study sessions sucked but I'm relieved to finally pass this cert.
Japan

Stdout on: July 30, 2026
Cramming on this website def saved me some time and cash but hey got through the exam eventually even if it took a while.
Ireland

Strace on: August 28, 2026
Wow the exam was super stressful. Using this website was a big help.
Switzerland

Bytecode on: August 19, 2026
Was nervous but these practice questions help a lot.
Malta

Netmask on: July 21, 2026
Practice questions made passing this exam possible.
Germany

Bootload on: June 23, 2026
Wasn't confident at first but the practice questions really helped.
Luxembourg

Tcpdump on: July 13, 2026
I was unsure at first but those practice questions on this website really helped me get it together for the exam.
France

Daemon on: August 23, 2026
Exam was tough but if you prep right it's doable.
Slovenia

Linter on: July 11, 2026
Felt unsure but practice helped a lot.
Cyprus

Strace on: September 06, 2026
Man the exam covered more than I thought it would and it was tough. Luckily the AI assistant on this site really helped break down some tricky parts so that was good.
Chile

Payload on: September 01, 2026
The exam prep on this site legit helped me cram in time save some cash and pass the test slowly but surely.
Greece

Pdu on: August 16, 2026
At first I was clueless but those practice questions taught me a lot.
Netherlands

Firmware on: August 22, 2026
This exam was tough and covered more than I expected. The AI assistant on this site saved my life honestly.
UAE

Anycast on: August 30, 2026
The exam was tougher than I thought. The AI assistant on this site really helped a lot.
Canada

Nullptr on: September 03, 2026
This exam had more stuff on it than I thought but the material here was helpful. The AI assistant guided me nicely through prep.
Cyprus

AI Explanation - verified by User3862 on: September 02, 2026
Question 88:
Correct answer: B — Planned and scheduled tasks and work packages to overcome geographical and time-zone challenges.
The issue is a resource scheduling and coordination problem. When assigning work, the project manager should account for team members’ working hours and arrange dependencies so that progress does not depend on an immediate response from someone in another time zone.
Effective planning might include:

Scheduling overlapping working hours for critical collaboration

Assigning independent tasks that can proceed asynchronously

Adding clear handoffs between offices

Documenting decisions, questions, and required inputs

Building appropriate time into the schedule for responses

Why D is less appropriate: communication tools such as video conferencing can help collaboration, but they do not eliminate time-zone differences or prevent work from stalling. The key preventive action is to design the schedule and work packages around the distributed team.
Shah Alam, Malaysia

AI Explanation - verified by User3698 on: September 22, 2026
Question 44:
Question 44: Answer B — Improve employee training and awareness
The issue is sensitive information being exposed through file-sharing services, often because users:

Share files with the wrong people

Use public links unnecessarily

Fail to classify sensitive data

Upload data to unauthorized services

Misunderstand company sharing policies

Training and awareness can teach employees how to handle sensitive data, verify recipients, configure sharing permissions, and use approved file-sharing platforms.
Why the others are weaker:

A — Step-up authentication: Helps protect administrator accounts, but does not directly address improper file sharing by users.

C — Password complexity: Helps reduce password attacks, not accidental data disclosure.

D — Mobile device management: Secures managed mobile devices, but does not directly control file-sharing behavior across the organization.

In a real environment, technical controls such as DLP, cloud access security controls, and restrictive sharing defaults could be stronger solutions, but they are not options here. Therefore, B is the best available answer.
Guará, Brazil

AI Explanation - verified by User2484 on: September 13, 2026
Question 3:
Question 3 tests AWS Organizations SCP inheritance and temporary account onboarding.
Correct answer: D, assuming the option text means:

Create a temporary Onboarding OU.

Move the new account into it.

Move the restrictive SCPs from the organization root to the Production OU.

Allow the account to update AWS Config.

Move the account into Production after onboarding.

Why this works:

An SCP attached at the organization root applies to every account and OU beneath it.

An SCP attached to the Production OU applies only to accounts in that OU.

Therefore, moving the restrictive SCP from the root to Production temporarily exempts the onboarding account without weakening the policies for existing production accounts.

Once onboarding is complete, moving the account into Production subjects it to the normal restrictions.

Important nuance: An Allow SCP cannot override an explicit Deny SCP. Therefore, simply placing an Allow SCP on the Onboarding OU would not work if the root SCP explicitly denies the AWS Config actions.
The other choices either remove protections permanently, introduce unnecessary maintenance, or incorrectly assume that an Allow SCP overrides a Deny.
Madrid, Spain

AI Explanation - verified by User6155 on: September 21, 2026
Question 29:
Correct answer: D — Plan Human Resource Management
Organizational theory explains how people, teams, and organizational units behave and interact. It helps the project manager design an effective project organization by considering:

Reporting relationships

Organizational structures

Leadership styles

Team maturity

Individual and group behavior

Communication and motivation

In Plan Human Resource Management, the project manager identifies and documents project roles, responsibilities, required skills, reporting relationships, and the staffing management plan. Organizational theory supports this planning work.
Why the other options are less appropriate:

Acquire Project Team: Focuses on obtaining the people needed for the project.

Develop Project Team: Focuses on improving team skills, relationships, and performance.

Manage Project Team: Focuses on tracking performance, resolving issues, and managing changes within the team.

Organizational theory may influence those processes, but in the PMI process framework it is specifically listed as a tool and technique for Plan Human Resource Management.
Johannesburg, South Africa

AI Explanation - verified by User5768 on: September 21, 2026
Why asynchronous not appropriate ?
Asynchronous inference is not necessarily impossible, but it is less appropriate for this scenario.

Asynchronous inference is designed for applications that submit individual inference requests, place them in a queue, and retrieve results later. It is useful when requests may take a long time or when traffic is intermittent.

Batch transform is designed specifically to run inference over an entire large dataset stored in Amazon S3 and produce an output dataset.

The key distinction is:

Large dataset/offline processing ? Batch transform

Large or slow individual requests processed later ? Asynchronous inference

Because the question emphasizes archived data, multiple-GB datasets, and no need for immediate predictions, the exam’s intended answer is Batch transform.
Bangkok, Thailand

AI Explanation - verified by User2290 on: September 11, 2026
Question 3:
Correct answer: No. The answer key shows B, and that is correct.

The requirement is an assessment of the Azure environment’s design, which requires a support plan offering proactive architectural guidance.

Premier support would provide this capability, but it is a high-cost option.

Since the requirement says to minimize expenses, Premier is not the best recommendation.

A lower-cost plan with the required advisory/design-review capability—historically Professional Direct in Azure’s support-plan model—would be more appropriate.

Therefore, subscribing to Premier satisfies the functionality but fails the cost-minimization requirement.
Bengaluru, India

AI Explanation - verified by User6794 on: September 12, 2026
Question 8:
The correct answers are A, B and C.
The manager:

Suspended an operator who refused to use unsafe equipment.

Paid another operator a bonus for using it.

Prioritised short-term productivity over employee safety.

This indicates a poor control environment and an inappropriate tone at the top.

A — Management is not particularly concerned with managing risks.

The manager knowingly allowed a significant health and safety risk to continue.

B — Employees will perceive that management does not care about health and safety risks.

Employees learn from management’s actions, not just its policies. The bonus sends a clear message that production is more important than safety.

C — The factory’s safety record is likely to be poor.

If unsafe behaviour is rewarded and safety concerns are punished, employees may stop reporting hazards and accidents are more likely.
D is incorrect: employees are being motivated to maintain productivity, but in an unsafe and inappropriate way. E is incorrect: the response is neither proportionate nor considered; the equipment should have been taken out of use until repaired.
Maseru, Lesotho

AI Explanation - verified by User1846 on: September 05, 2026
Question 1:
The correct choices are A. Azure Resource Manager templates and B. PowerShell Desired State Configuration (DSC) extension for Windows.

Azure Resource Manager (ARM) templates define the virtual machines and related Azure resources declaratively. You can deploy the same template repeatedly, ensuring consistent VM sizes, networking, storage, extensions, and other infrastructure settings.

PowerShell DSC extension applies and maintains the required Windows configuration inside each VM. DSC is state-based: if a setting changes or becomes incorrect, DSC can bring it back to the desired configuration.

Why the others are less suitable:

Azure Pipelines deployment groups organize deployment targets, but they do not primarily enforce ongoing VM configuration.

Custom Script Extension runs setup scripts, but it is generally less maintainable and does not continuously enforce configuration like DSC.

Pipeline stage templates reuse pipeline workflow definitions; they do not configure the VMs themselves.

The answer key’s A and B is correct.
Mumbai, India

AI Explanation - verified by User1054 on: September 25, 2026
Question 1:
Correct answer: B — Create a custom pool.
A custom Apache Spark pool lets you provision dedicated Spark compute for the bronze and silver workloads. Assigning the workloads to separate pools prevents them from competing for the same shared Spark resources and provides better control over node size, autoscale settings, and workload capacity.
Why the other options are less suitable:

Disable high concurrency: This changes session-sharing behavior but does not provide dedicated compute or true workload separation.

Modify the number of executors: Adjusts resources within a Spark job; it does not isolate bronze and silver processes.

Set the default environment: Controls libraries and runtime configuration, not compute isolation.

Important: The supplied explanation appears incorrect. It discusses isolated compute in Azure Synapse, including an XXXLarge node requirement, rather than explaining the Fabric answer. For this question, the relevant concept is using a custom Spark pool to separate workloads.
Johannesburg, South Africa

AI Explanation - verified by User2144 on: September 10, 2026
Question 58:
Correct answer: A. MITRE ATT&CK
MITRE ATT&CK is a knowledge base describing real-world adversary tactics, techniques, and procedures (TTPs). A security administrator can use it to understand how attackers operate and select appropriate detection and mitigation strategies.
Why the others are incorrect:

CSIRT: A team that responds to and manages security incidents.

CVSS: A scoring system for rating the severity of vulnerabilities.

SOAR: A technology platform for automating and coordinating security operations and incident response.

The key clue is “real-world knowledge base for adversary behavior.” That directly describes MITRE ATT&CK.
Chicago, United States

AI Explanation - verified by User5884 on: September 09, 2026
Question 29:
Correct answer: A — Hashing
A cryptographic hash creates a fixed-length value based on the software’s contents. After the final version is completed, the company can store the known-good hash and later recalculate it:

If the hashes match, the software has likely not changed.

If they differ, the software was modified or corrupted.

Why the other options are less suitable:

Encryption: Protects confidentiality by making data unreadable; it does not primarily verify that software was unchanged.

Baselines: Establish expected configurations or states, but hashing is the specific method for checking file integrity.

Tokenization: Replaces sensitive data with non-sensitive tokens and is unrelated to software integrity.

For stronger protection against someone replacing both the software and its hash, organizations commonly use digital signatures, which provide integrity and authenticity.
Houston, United States

AI Explanation - verified by User8458 on: September 21, 2026
Question 19:
Correct answer: D — IP service affinity
IP service affinity allows Discovery to remember which protocol or service successfully identified a device at a particular IP address.
In this scenario:

Discovery tries the SSH probe first.

SSH fails.

Discovery tries SNMP, which succeeds.

Discovery records SNMP as the preferred service for that IP.

Future discoveries try SNMP first.

Why the others are incorrect:

Classification identifies the type of device, such as a server, router, or printer.

Credential affinity remembers which credentials work for a device.

MID Server affinity associates a device or network with a particular MID Server.

IP service affinity specifically controls the preferred discovery protocol or service.

Bengaluru, India

AI Explanation - verified by User4761 on: September 09, 2026
Question 9:
The answer key appears to be incorrect. The correct answer should be A — True.
Outside the required_providers block, Terraform configuration refers to a provider using its local name, such as:

hcl provider "aws" { region = "us-east-1" } resource "aws_s3_bucket" "example" { bucket = "my-example-bucket" }

Here, aws is the provider’s local name.
The source address—for example, hashicorp/aws—is used in the required_providers block to identify where the provider comes from:

hcl terraform { required_providers { aws = { source = "hashicorp/aws" } } }

The source address is not normally used as a provider reference in resource blocks or provider configurations. Therefore, the question’s stated B — False conflicts with standard Terraform behavior.
Agege, Nigeria

AI Explanation - verified by User6020 on: September 23, 2026
Question 1:
Question 1 is asking about the benefits and requirements of Direct Product Profitability (DPP).
The correct answers are A, B and C.

A — Improved management of storage space: Correct.

DPP calculates the profitability of individual products after considering costs such as warehousing, handling and delivery. Management can identify products that occupy substantial space but generate low profit.

B — Improved supplier relationships: Correct.

More detailed product-cost information supports better discussions with suppliers about prices, delivery arrangements, packaging and product range decisions.

C — Improved pricing decisions: Correct.

DPP provides a more realistic product profit figure than simply comparing selling price with purchase cost. This helps management set prices and negotiate discounts.

D — Non-product-specific costs must be apportioned: Incorrect.

DPP aims to allocate costs using appropriate cost drivers, rather than make arbitrary apportionments. For example, warehouse handling costs may be assigned based on handling activity.

E — Profitability of each customer group: Incorrect.

DPP focuses on the profitability of individual products, not customer groups. Customer profitability analysis is a separate technique.
Maseru, Lesotho

AI Explanation - verified by User4550 on: September 08, 2026
Question 29:
Question 29: Yes — Azure AD Identity Protection is appropriate.
Azure AD Identity Protection (now Microsoft Entra ID Protection) detects risky sign-ins, including sign-ins from:

Unfamiliar locations or IP addresses

Anonymous or malicious IP addresses

Leaked credentials

Unusual sign-in behavior

You can configure a sign-in risk policy to respond automatically when a risky sign-in is detected. One possible control is require password change, typically for high-risk sign-ins.
Therefore, the answer key’s A (Yes) is correct.
Why not Privileged Identity Management (PIM)? Azure AD Privileged Identity Management manages and monitors privileged administrative roles. It does not evaluate users’ sign-in risk or automatically force password changes based on an unfamiliar IP address.
Norwich, United Kingdom

AI Explanation - verified by User2976 on: September 24, 2026
what is athena
Amazon Athena is a serverless interactive query service that lets you run SQL queries directly against data stored in services such as Amazon S3.
Key points:

No servers or database infrastructure to provision.

Uses standard SQL.

Supports formats such as JSON, CSV, Parquet, and ORC.

You typically define the table structure with AWS Glue Data Catalog or Athena’s own schema definitions.

Charges are generally based on the amount of data scanned, so partitioning and columnar formats can reduce cost.

It does not copy the data into a separate database; it reads the files in S3 when you run a query.

For Question 2, Athena is appropriate because the logs already exist in S3 and the company needs simple, on-demand analysis with minimal operational overhead.
Bengaluru, India

AI Explanation - verified by User1558 on: September 17, 2026
Question 10:
Correct answer: Yes (A).
For a SQL Server Always On availability group listener on Azure VMs, the Azure internal load balancer’s load-balancing rule must have Floating IP enabled.
Why:

The listener uses a virtual IP address shared by the availability-group replicas.

Floating IP, also called Direct Server Return (DSR), allows the SQL Server nodes to respond using the listener’s IP address rather than their individual VM IP addresses.

This is required for the availability-group listener to function correctly with an Azure internal load balancer.

The rule should also use an appropriate health probe and the listener’s frontend private IP address. Client IP session persistence alone is not sufficient, which is why Question 9’s proposed solution is incorrect.
Edmonton, Canada

AI Explanation - verified by elyar.ab on: September 03, 2026
Question 523:
The answer key shows D, but I believe the better answer is A: AWS AppSync pipeline resolvers.
Why A fits:

AWS AppSync is designed for serverless applications that need to retrieve and combine data from multiple sources.

A pipeline resolver can invoke multiple functions or data-source resolvers, including resolvers connected to different DynamoDB tables.

The application can receive the combined result through one GraphQL request, without requiring custom aggregation logic in the application.

This is operationally efficient because AppSync manages the API layer and resolver execution.

Why D is likely incorrect:

Athena Federated Query is intended primarily for analytics and ad hoc querying, not low-latency application data retrieval.

Querying DynamoDB through Athena can consume DynamoDB read capacity and may affect table performance.

It also introduces analytical-query overhead and is not the normal choice for a microservice web application.

The key concept is: use AppSync pipeline resolvers for application-level aggregation across multiple DynamoDB tables; use Athena Federated Query for analytics.
Scarborough, Canada

AI Explanation - verified by User3350 on: September 20, 2026
Question 18:
Correct answer: C — try to expand its customer base to avoid becoming dependent on the corporation.
The passage warns that a minority-owned business may become dependent on one large corporate customer. If that customer reduces its orders or ends the relationship, the small business could suffer serious financial problems. The business might also become complacent and stop seeking other opportunities.
Therefore, it should develop relationships with additional customers, even though it may have to compete with larger, established companies.
Why the other choices are wrong:

A: Not expanding would increase its dependence.

B: More business from the same corporation would make dependence worse.

D: Passing work to other minority businesses does not solve its own dependence.

E: The passage does not suggest that it can force or influence the corporation to give work to others.

Lagos, Nigeria

AI Explanation - verified by User5950 on: September 03, 2026
Question 191:
Question 191: The answer key shows D (policy), but I believe the correct answer is C: risk perspective.
Senior management is most likely to support information security governance when it is connected to business risk and organizational objectives. Presenting security in terms of risks—such as financial loss, operational disruption, legal exposure, or reputational damage—helps executives understand why governance matters.
Why the other options are weaker:

Threat perspective: Focuses on possible attacks, but may seem technical or hypothetical.

Compliance perspective: Can motivate action, but compliance alone does not demonstrate the broader business value of governance.

Policy perspective: Policies are important, but they are a means of implementing governance, not its primary business justification.

For ISACA questions, look for the option that frames security as enterprise risk management and business protection, rather than as technical controls or policy administration.
Niterói, Brazil

AI Explanation - verified by User9738 on: September 22, 2026
Question 50:
A resposta correta é A — Comprar Provisioned Throughput para o modelo customizado.
No Amazon Bedrock, um modelo customizado ou fine-tuned precisa de capacidade dedicada para ser usado em inferência. O Provisioned Throughput reserva essa capacidade e permite invocar o modelo por meio das APIs do Bedrock.
As outras opções não são necessárias:

B: Não é preciso implantar o modelo em um endpoint do Amazon SageMaker, pois o Bedrock já oferece a infraestrutura de inferência.

C: O SageMaker Model Registry é usado para gerenciar modelos no SageMaker, não é requisito para modelos customizados no Bedrock.

D: Não existe uma etapa geral de “conceder acesso” ao modelo customizado como requisito principal de uso. O ponto essencial é adquirir o Provisioned Throughput.

A ideia da questão é distinguir entre usar um modelo base sob demanda e usar um modelo customizado, que exige capacidade provisionada no Bedrock.
São Paulo, Brazil

AI Explanation - verified by khamankopane66 on: September 14, 2026
Question 16:
Correct answer: A, C and D.
Management should ensure:

A — Capacity: The system must handle all current records and anticipated future records. A system that cannot cope with volume will quickly become ineffective.

C — Accuracy: Academic records are critical, so the new system must be at least as accurate as the existing system and comparable systems. Poor accuracy could cause serious administrative and reputational problems.

D — Integration: Linking with the university’s financial systems supports consistency and avoids duplicate data entry, especially for registration, deregistration and fee-related transactions.

Why the others are not essential prerequisites:

B — Parallel running: This is a useful implementation and risk-control technique, but it is not an essential feature of the system itself. It may also be expensive and time-consuming.

E — Internet access for all information: This creates significant confidentiality and security risks. External access might be needed for selected services, but unrestricted access to all information is not essential and would be inappropriate for student records.

Maseru, Lesotho

AI Explanation - verified by User3169 on: September 13, 2026
Question 6:
Correct answer: B. SLA (Service-Level Agreement)
An SLA defines the expected level of service between a customer and a vendor. It commonly includes:

Response and resolution time frames

Availability or uptime requirements

Performance targets

Support obligations

Penalties for failing to meet requirements

Why the others are less appropriate:

SOW (Statement of Work): Defines the project’s scope, tasks, and deliverables.

MOA (Memorandum of Agreement): Describes cooperation and responsibilities between parties.

MOU (Memorandum of Understanding): Records a general mutual understanding, usually without detailed enforceable service targets.

Therefore, the agreement specifying how quickly a vendor must respond is an SLA.
Jonesboro, United States

AI Explanation - verified by User6058 on: September 10, 2026
Question 148:
Correct answer: A — The selling division records a higher price than the cost recorded by the receiving division.
Dual pricing means that the same internal transfer is recorded at two different prices:

The selling division receives a credit based on a favourable transfer price, often market price or full cost plus a profit margin.

The receiving division is charged a lower amount, such as marginal cost or another agreed price.

The difference is accounted for centrally by head office or a corporate adjustment.

This system can motivate both divisions: the selling division is rewarded for supplying goods, while the receiving division is not discouraged by an excessive internal cost.
The other options describe quantity discounts, marginal-cost pricing with a lump-sum payment, or lower internal prices, but none defines the key feature of dual pricing.
Maseru, Lesotho

AI Explanation - verified by User3085 on: September 21, 2026
Question 40:
Correct answer: B — Transitioning the platform to an IaaS provider
IaaS can satisfy all three requirements:

50% memory utilization baseline: The environment can be provisioned with excess capacity, leaving room for growth and workload spikes.

Storage scalability: Cloud storage can generally be expanded as needed without redesigning the physical platform.

Single circuit failure resilience: A properly designed IaaS provider uses redundant power circuits and infrastructure, so failure of one circuit should not take the platform offline.

Why the other options are weaker:

A — Dual PDUs: Helps with power redundancy but does not provide storage scalability.

C — Network load balancing: Provides network-path resilience, not memory or storage scalability, and does not address a power-circuit failure.

D — Multiple NAS devices: May improve storage capacity, but does not inherently provide power resilience or the required compute-capacity baseline.

Atlanta, United States

AI Explanation - verified by User3668 on: September 03, 2026
Question 5:
Question 5 tests how to calculate usable host ranges from an IPv4 address and prefix length. The image containing the full drag-and-drop options is unavailable, but the method is:

Find the subnet-mask increment in the octet where the prefix ends.

Identify the network address by finding the subnet boundary at or below the given IP.

The first usable address is network address + 1.

The broadcast address is one address before the next subnet.

The last usable address is broadcast - 1.

Examples from the explanation:

172.28.228.144/18

- /18 gives an increment of 64 in the third octet. - Subnet: 172.28.192.0/18 - Usable range: 172.28.192.1–172.28.255.254

172.28.228.144/23

- /23 gives an increment of 2 in the third octet. - Subnet: 172.28.228.0/23 - Broadcast: 172.28.229.255 - Usable range: 172.28.228.1–172.28.229.254
The answer key’s calculations for these examples are correct. To map every item, the missing image/options would be needed.
Midrand, South Africa

AI Explanation - verified by User3133 on: September 21, 2026
Question 54:
Correct answer: C — Guardrails for Amazon Bedrock
Guardrails for Amazon Bedrock help control both the input prompts and model responses. The company can configure safeguards such as:

Filtering harmful or inappropriate content

Blocking specified topics

Detecting and masking sensitive information

Enforcing content policies suitable for children

Why the others are incorrect:

Amazon Rekognition analyzes images and videos; it does not control text generated by a language model.

Amazon Bedrock playgrounds are for testing models and prompts, not enforcing production safety policies.

Agents for Amazon Bedrock help models complete tasks and use tools; they do not primarily provide content-safety controls.

For exam questions involving safe, age-appropriate, or policy-compliant Bedrock output, look for Guardrails for Amazon Bedrock.
Bangkok, Thailand

AI Explanation - verified by User5421 on: September 25, 2026
Question 17:
Correct answer: D. 587
Port 587 is used for SMTP message submission, typically allowing email clients to send mail through a server using authentication and encryption such as STARTTLS.
Why the others are not best:

25 – Traditional SMTP server-to-server mail transfer; often blocked for client submission and not inherently secure.

110 – POP3 for receiving email; unencrypted by default.

143 – IMAP for accessing email; unencrypted by default.

587 – Authenticated email submission and commonly secured with TLS.

Exam tip: Port 587 is the standard answer for secure/authenticated outbound email submission. Secure versions of POP3 and IMAP use different ports, but those are not the choices here.
Naga, Philippines

AI Explanation - verified by Cammikaze2000 on: September 03, 2026
Question 10:
Correct answer: B — Management practices
Management practices enable an organization’s digital product and service management activities by providing the capabilities, knowledge, methods, and resources needed to manage products and services.
They support activities such as:

Planning and designing products and services

Developing and delivering them

Managing risks, suppliers, and resources

Measuring performance

Continually improving value delivery

Why the other options are less suitable:

Value stream steps describe activities used to create and deliver value; they do not themselves provide the broader capabilities.

Vision and operating model provide direction and structure, but they are not the practical management capabilities that enable the work.

Value chain is the operating model showing how activities combine to create value; it is enabled by practices and resources.

The key distinction is: the value chain describes how value is created, while management practices provide the capabilities needed to perform and manage that work.
London, United Kingdom

AI Explanation - verified by User4573 on: September 18, 2026
Question 66:
The answer key appears incorrect. I believe the correct answer is: Yes.
The Bulk invite users operation in Microsoft Entra ID is designed to invite multiple external users from a CSV file. It creates guest user objects in the tenant and sends invitation emails to the listed addresses.
Why:

The CSV contains the external users’ email addresses.

The bulk invitation feature supports inviting many guest users in one operation.

Each invited user becomes a guest account in contoso.com.

The explanation given in the question is also misleading. New-AzureADMSInvitation creates an invitation for an individual user, but it could be run repeatedly in a script; it is not required when using the portal’s bulk operation.
Therefore, assuming the CSV follows the required Microsoft Entra bulk-invitation format, the proposed solution does meet the goal.
Noida, India

AI Explanation - verified by User5548 on: September 11, 2026
Question 111:
Question 111 asks which statements describe actions that do not address the weaknesses of traditional budgeting.
The answer key gives D, E and F.

D — Managers focus on keeping costs low in the short term to maximise profits.

This is a weakness of traditional budgets. They can encourage short-term cost cutting at the expense of long-term investment, quality and customer value.

E — Managers are given incentives to meet or undercut budgets.

Traditional budgets often link rewards to budget achievement. This can encourage budgetary gaming, such as setting easy targets, delaying expenditure or manipulating results. Beyond budgeting uses broader performance measures instead.

F — Managers delegate responsibility simply to reduce their workload.

This does not reflect the purpose of beyond budgeting. Beyond budgeting encourages empowerment and decentralised decision-making, but responsibility should be delegated to improve responsiveness and accountability—not merely to make managers’ workloads easier.
The other statements are consistent with beyond budgeting: broader goals, greater autonomy and targets rather than rigid budgets.
Maseru, Lesotho

AI Explanation - verified by puranikatul on: September 26, 2026
Question 146:
The correct answer is B: a spoke.
In IntegrationHub, a spoke is a ServiceNow application that packages integration content for a particular third-party system or business function. A spoke can contain:

Actions that call external APIs

Subflows

Connection and credential aliases

Supporting integration logic

For example, a Slack spoke may provide actions for sending messages or creating channels.
Why the other choices are less accurate:

Action — A reusable operation within a flow, such as “Create a record” or “Send email.”

Connection — Defines how ServiceNow authenticates and communicates with an external system.

Integration step — A general flow step, not the name for the packaged integration.

Therefore, third-party integrations provided through IntegrationHub are generally called spokes.
Bengaluru, India

AI Explanation - verified by User3621 on: September 18, 2026
Question 30:
Correct answer: B. SAML
The company already uses single sign-on (SSO). When adding a new cloud-based application, it should configure a federation protocol that allows the existing identity provider to authenticate users to the new service.

SAML (Security Assertion Markup Language): Commonly used for enterprise SSO between an identity provider and cloud applications. It sends signed authentication assertions to the service provider.

RADIUS: Primarily used for centralized authentication to network devices, VPNs, and wireless networks.

EAP: An authentication framework commonly used with network access technologies; it is not typically the SSO protocol for SaaS applications.

OpenID: Related to identity authentication, but traditional enterprise SSO questions involving cloud applications generally expect SAML. OpenID Connect is a newer authentication layer built on OAuth 2.0.

Therefore, the answer key’s B is correct.
Lahore, Pakistan

AI Explanation - verified by User4405 on: September 19, 2026
Wrong answer. You use groups to assign devices to it. The use those groups as scope in policies, effectively passing devices between policies
You’re right—the answer key’s B (Use sub-rules) is incorrect. The better answer is D: Use groups.

Assign endpoints to a group based on the result of one policy.

Use that group as the scope of another policy.

This effectively passes the endpoints from one policy’s processing flow to another.

Sub-rules create branches within a single policy; they are not the standard mechanism for transferring endpoints between separate policies.
Madrid, Spain

AI Explanation - verified by User8952 on: September 23, 2026
Question 1:
Correct answer: C — three
Why:

The original app version exists.

You create and publish a new version, so there are now two versions.

When you restore the previous version, Power Apps does not delete or overwrite the newer version. Instead, it creates another version based on the restored one.

Therefore, the Versions tab shows:

Original version

Newly created and published version

New version created by the restore operation

So, the statement “you will see two versions” is incorrect; it should say three versions.
Brampton, Canada

AI Explanation - verified by User6966 on: September 23, 2026
Question 9:
Correct answers: B and D — Warehouse size and number of clusters.
Snowflake virtual warehouse credits are primarily determined by:

Warehouse size: Larger warehouses use more credits per unit of time than smaller ones.

Number of clusters: A multi-cluster warehouse can run multiple clusters, and each active cluster consumes credits. Therefore, increasing the maximum or active cluster count can increase consumption.

The following do not directly determine compute-layer credit usage:

Number of users: More users may cause more workload, but users themselves do not consume credits.

Amount of data processed: Snowflake warehouses are not charged directly by the amount of data scanned. However, processing more data may cause the warehouse to run longer, indirectly increasing credits.

Also remember that actual usage depends on how long the warehouse runs, including any configured auto-suspend and auto-resume behavior.
Columbus, United States

AI Explanation - verified by mengwalcien on: September 26, 2026
Question 285:
Question 285 has an issue: the answer key says B (255.255.255.192, /26), but C (255.255.255.224, /27) is the best answer if the goal is three subnets with 30 hosts each.

/27 (255.255.255.224)

- 32 total addresses per subnet - 30 usable host addresses - Creates 8 subnets from the original /24 - Exactly fits the requirement of 30 hosts per subnet

/26 (255.255.255.192)

- 64 total addresses per subnet - 62 usable hosts - Creates only 4 subnets - It can technically support three subnets, but wastes address space
The other choices do not fit:

/25: Creates only 2 subnets, not 3

/28: Provides only 14 usable hosts per subnet

Best exam answer: C, /27. The stated answer B is technically capable of supporting the hosts, but it is not the most efficient or precise choice.
Quezon City, Philippines

AI Explanation - verified by himanshupandey473 on: September 15, 2026
Question 75:
Question 75: Linear regression
The correct choice is linear regression when the model must predict a numeric value.

Regression predicts continuous numeric outcomes, such as house price, temperature, or sales amount.

Linear regression assumes the target can be estimated from a linear relationship between the input features and the target.

In Azure Machine Learning, you use a labeled dataset containing:

- Features: input columns - Label: the numeric value to predict
Why the other options are incorrect:

Classification predicts a category or class, such as “spam” or “not spam.”

Clustering groups similar records without a known label; it is an unsupervised learning technique.

So, if the sentence describes predicting a numeric target, select Linear regression.
Pune, India

AI Explanation - verified by User7377 on: September 01, 2026
Question 8:
Correct answer: B — regulatory and legal requirements.
Records should primarily be retained for the period required by applicable:

Laws and regulations

Litigation holds

Industry or contractual obligations

Tax, financial, health, or privacy requirements

An organization must be able to produce records when legally required, but should not retain them indefinitely because unnecessary retention increases storage costs, discovery burden, and privacy risk.
Why the others are weaker:

Business strategy and direction: May influence retention, but cannot override legal requirements.

Storage capacity and longevity: Practical considerations, not the primary driver.

Business ease and value analysis: May support decisions after compliance obligations are identified.

Exam rule: Determine the mandatory legal and regulatory retention period first; then address business and operational requirements.
Islington, United Kingdom

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 191:
The correct answer is A — $500.
Relevant costs are future cash flows that change because of the decision:

Additional running costs: $800

Less depreciation: $300

Depreciation is a non-cash accounting charge, so it is not relevant to the decision.

The $100 reduction in fixed production overhead absorbed is only an accounting reallocation. It does not represent an actual saving in total fixed overhead.

Therefore:
\[ \$800-\$300=\boxed{\$500} \]
The machine’s relevant additional cost is $500 per month. The question does not provide any relevant cost or disposal proceeds for the existing machine, so those cannot be included.
Maseru, Lesotho

AI Explanation - verified by User6870 on: September 19, 2026
Question 1:
Correct answer: B. Transfer
Cyber insurance is a risk transfer strategy. The company shifts some of the financial impact of a cybersecurity incident to an insurance provider in exchange for paying premiums.

Accept: Acknowledging the risk and choosing not to take additional action.

Transfer: Shifting the risk or financial consequences to another party, such as an insurer.

Mitigate: Reducing the likelihood or impact through controls, such as patching or access restrictions.

Avoid: Eliminating the activity that creates the risk.

Insurance does not eliminate the underlying threat; it primarily transfers the financial consequences of that risk.
Islamabad, Pakistan

AI Explanation - verified by User9951 on: September 02, 2026
Question 7:
The correct choices are B and D.

D — Create sibling resource pools for the Production VMs and Test VMs.

This separates the workloads into distinct resource pools under the cluster, so their resource allocation can be managed independently.

B — Configure a memory reservation on the Production resource pool.

Set the reservation to the amount of memory the Production VMs require. A reservation guarantees that memory under contention, provided the cluster has sufficient physical resources.
Why the others are insufficient:

Shares only determine relative priority when resources are scarce; they do not guarantee memory.

A parent resource pool alone does not provide a guarantee.

A child pool for Test VMs does not reserve memory for Production.

DRS balances workloads, but it does not by itself guarantee that a VM receives its full configured memory. The reservation provides that guarantee.
South Tangerang, Indonesia

AI Explanation - verified by User1183 on: September 08, 2026
Question 33:
A resposta indicada D parece estar incorreta. A melhor resposta é A:
> Criar grupos de categorias de dados separados para cada divisão e atribuir a categoria ao perfil da divisão.
No Salesforce Knowledge, o controle de acesso aos artigos é feito principalmente por:

Data Category Groups e categorias;

Visibilidade dessas categorias para perfis ou permission sets.

Assim, cada divisão pode ter sua própria estrutura de categorias, e o perfil dos usuários da divisão recebe acesso somente às categorias correspondentes. Durante uma busca, esses usuários verão apenas os artigos classificados em categorias permitidas.
As outras opções:

B e C: regras de compartilhamento não são o mecanismo apropriado para restringir resultados de busca do Knowledge por divisão.

D: a role hierarchy não é o mecanismo principal para controlar a visibilidade de categorias do Knowledge. Além disso, a configuração correta é atribuir visibilidade a perfis ou permission sets.

Portanto, para a prova, eu estudaria A como a resposta conceitualmente correta, apesar de o gabarito mostrar D.
Camaragibe, Brazil

AI Explanation - verified by User2510 on: September 21, 2026
Question 1:
Question 1 tests basic network device placement, wireless security, and port forwarding.
The intended configuration is:

Wireless AP

- LAN IP: 192.168.10.1 - Security: WPA2-PSK - The game console connects through the AP so wireless access is secured and its chat/online services can function.

Router

- Create a port-forwarding rule allowing TCP port 3389. - Port 3389 is used by Remote Desktop Protocol (RDP). - The rule forwards incoming RDP traffic to the Windows PC, allowing remote access from outside the network.

Firewall

- Configure the screened-subnet-side IP as 10.100.0.1. - A screened subnet (often called a DMZ) separates publicly accessible or specially routed systems from the trusted internal LAN.

Device placement

- Put the Windows PC behind the router, because the RDP port-forward rule targets it. - Put the game console on the Wireless AP. - Place the firewall in front of the screened subnet.
The key clues are RDP = TCP 3389, WPA2-PSK = secured wireless, and screened subnet = firewall-segregated network.
Farmington Hills, United States

AI Explanation - verified by User3451 on: September 02, 2026
Question 9:
The answer key shows A, but its explanation is technically misleading.
Because the objects use SSE-S3, Amazon S3 manages the encryption keys. The Amazon Bedrock execution role does not need kms:Decrypt permission or access to a customer-managed KMS key.
The role should instead have the required Amazon S3 permissions, such as:

s3:GetObject for the relevant objects

s3:ListBucket if listing is required

Appropriate bucket and object resource permissions

Therefore, A is the closest option, but it should be interpreted as ensuring that the Bedrock role has permission to access the S3 data—not as granting KMS decryption permissions.
Why the others are wrong:

B: Making the bucket public is insecure and unnecessary.

C: Prompt engineering cannot override AWS IAM or encryption permissions.

D: Data sensitivity does not determine whether the role can access it.

If the data used SSE-KMS instead, then the role would additionally need kms:Decrypt permission on the KMS key.
Bengaluru, India

AI Explanation - verified by User8057 on: September 16, 2026
Question 184:
The answer key appears incorrect. “Escape to host” is not a suitable answer.

Escape to host: A virtualization attack where code escapes a guest VM and accesses the host system. Nothing in the scenario mentions virtualization.

Browser extension: Can redirect or manipulate web-browser traffic, but not normally database-server traffic.

Valid accounts: Describes using stolen or compromised credentials, not redirecting network traffic.

Process injection: Injecting malicious code into a legitimate database or networking process could allow an attacker to alter how that process handles outgoing traffic.

If forced to choose from these options, B. Process injection is the closest answer, although the question is poorly written. A more technically precise MITRE ATT&CK technique would likely involve traffic redirection/interception or proxying, depending on how the attacker achieved it—not “escape to host.”
Chicago, United States

AI Explanation - verified by User3564 on: September 09, 2026
Question 12:
Answer: Standard
Why:

Custom domain: miami.weyland.com requires a paid App Service tier; Free and Shared are unsuitable.

Two instances: Standard supports scaling to multiple instances.

SSL: Standard includes SSL support.

12 GB storage: Basic provides only about 10 GB, so it does not meet the requirement. Standard provides substantially more storage.

Cost minimization: Standard is the lowest tier among the choices that satisfies all requirements.

The answer key’s A (Standard) is correct.
Cape Town, South Africa

AI Explanation - verified by User1028 on: September 22, 2026
Question 1:
The answer key shows C, but I believe the best answer is A: Provides a scalable platform for developing and deploying generative AI solutions.
Why:

Microsoft Foundry is an enterprise platform for developers, data scientists, and IT teams.

It supports the full AI application lifecycle: selecting models, connecting enterprise data, developing, evaluating, deploying, monitoring, and scaling solutions.

It can include visual tools and low-code experiences, but it is not primarily designed to enable business users to build complete generative AI solutions independently.

Why the other options are weaker:

B: You still need to select and configure an appropriate model.

C: Business users may participate through visual tools, but they are not the primary target audience.

D: Foundry includes low-code tools, but it is not fundamentally a low-code-only platform.

Exam takeaway: Microsoft Foundry’s key benefit is an enterprise-grade, scalable environment for building and managing generative AI applications and agents.
Chennai, India

AI Explanation - verified by User4935 on: September 11, 2026
Question 50:
Correct answer: A — Purchase Provisioned Throughput for the custom model.
When a company fine-tunes or customizes an Amazon Bedrock foundation model, the resulting custom model cannot generally be invoked on-demand like a standard Bedrock base model. The company must purchase Provisioned Throughput, which allocates dedicated capacity for using that custom model through Bedrock.
Why the other options are incorrect:

B. Deploy to a SageMaker endpoint: This is needed for SageMaker-hosted models, not for a model intended to be used directly in Amazon Bedrock.

C. Register with SageMaker Model Registry: SageMaker Model Registry is unrelated to invoking custom models in Bedrock.

D. Grant access in Bedrock: Access permissions may be necessary, but they do not replace the required provisioned capacity.

The key exam distinction is: Bedrock custom model ? Provisioned Throughput.
Helsinki, Finland

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 81:
For the exam’s intended answer, choose A, C, and E:

A — Use a custom controller: An Apex class can contain the page’s logic.

C — Use a standard controller with extensions: The standard controller provides basic CRUD behavior, while an extension adds custom logic.

E — Use a standard controller: Useful when the page works mainly with one Salesforce object and needs standard functionality.

The key is treating a dashboard Visualforce page as requiring a controller-based implementation.
Important accuracy note: The answer key is questionable in general Visualforce terms. Visualforce can also use:

A page with no controller for static or controller-free content.

A custom controller with extensions; extensions are not limited only to standard controllers.

So A, B, C, D, and E can be valid Visualforce configurations generally. The stated three-answer key appears to depend on a dashboard-specific exam assumption that is not clearly expressed in the question.
Chennai, India

AI Tutor 👋 I’m here to help!

Cisco 350-901 Exam Prep Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 25 )

QUESTION: 65

Explanation:

QUESTION: 66

QUESTION: 67

QUESTION: 68

QUESTION: 69

Cisco 350-901 Exam Prep
Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 25 )