DRAG DROP (Drag and Drop is not supported)
Drag and drop the descriptions from the left onto the related OAuth-defined roles on the right.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Show Answer Next Question

QUESTION: 66

Refer to the exhibit. This cURL POST request creates an OAuth access token for authentication with FDM API requests.

What is the purpose of the file “@token_data” that cURL is handling?

This file is given as input to store the access token received from FDM.
This file is used to send authentication-related headers.
This file contains raw data that is needed for token authentication.
This file is a container to log possible error responses in the request.

Answer(s): C

Show Answer Next Question

QUESTION: 67

What is the result of a successful OAuth2 authorization grant flow?

The third-party service is provided with a token that allows actions to be performed.
The user has the application rights that correspond to the user's role within the application's database.
The application is provided with a token that allows actions on services on the user's behalf.
The user has administrative rights to the application's backend services.

Answer(s): C

Show Answer Next Question

QUESTION: 68

In the three-legged OAuth2 process, after the authorization server presents a form to the resource owner to grant access, what is the next step?

The resource owner authenticates and optionally authorizes with the authorization server.
The user who owns the resource initiates a request to the OAuth client.
If the resource owner allows access, the authorization server sends the OAuth client a redirection.
A form to allow or restrict access is submitted by the owner of the resource.

Answer(s): D

Show Answer Next Question

QUESTION: 69

Which OAuth mechanism enables clients to continue to have an active access token without further interaction from the user?

refresh grant
JWT
password grant
preshared key

Answer(s): A

Show Answer Next Question

Download PDF Next Page

Viewing page 26 of 78
Viewing questions 126 - 130 out of 507 questions

Post your Comments and Discuss Cisco 350-901 exam prep with other Community members:

Comments:

Name:

350-901 Exam Discussions & Posts
350-901 AI Verifications

Alex on: March 02, 2025
Great material
UNITED KINGDOM

Chmod on: August 01, 2026
Exam was stressful. Prep helped though so thanks.
Canada

Vlan on: July 02, 2026
This exam was brutal but the practice questions helped so much. Glad that's over.
Italy

Strace on: August 12, 2026
This exam was a bit stressful but the practice questions on this website helped. Glad it's over and done with now.
Switzerland

Sshd on: August 02, 2026
The exam had more on it than I was ready for but the material here still helped a lot. The AI assistant on this site really made stuff clearer when I got stuck.
Japan

Netmask on: July 21, 2026
Practice questions made passing this exam possible.
Germany

Endian on: July 26, 2026
Wasn't sure I'd ever feel ready for this exam but the practice questions here really helped me get a grip on things.
Mexico

Sshd on: August 19, 2026
The exam stressed me out but these questions did good. I'm glad I used this website for prep.
Sweden

PktLoss on: August 08, 2026
Took me a while to get through but the practice questions helped review and I passed.
Canada

Stdout on: July 30, 2026
Cramming on this website def saved me some time and cash but hey got through the exam eventually even if it took a while.
Ireland

yusufcerts on: July 07, 2026
This exam was pretty stressful but the prep material really helped. Just glad it's over now.
Netherlands

Heap on: June 06, 2026
The exam was tough but man these questions were a lifesaver.
Malta

omaritpro on: July 26, 2026
Crammed with this site and its AI assistant really saved me both time and money plus passed the exam slowly but surely.
Canada

Glibc on: July 30, 2026
The exam was brutal. Good prep got me through.
United Kingdom

priyadevops on: July 07, 2026
Honestly this exam covered more stuff than I thought it would so make sure to dig deeper. The AI assistant on this site made a huge difference though especially with explaining the complicated bits.
United States

Posix on: June 30, 2026
Man this exam was so stressful. Glad the prep on this website got me through it okay.
South Korea

Tcpdump on: September 15, 2026
Crammed with this site to save time and money passed the cert slow but steady.
Costa Rica

Mtu on: August 13, 2026
Man this cert was mad stressful but these questions on the site totally chill. Glad I used it.
Argentina

Firmware on: June 08, 2026
The exam was super stressful but the practice questions were a lifesaver. Thank goodness for this website man.
Italy

Ping on: June 10, 2026
Whew this exam was kinda stressful but the practice questions helped. Glad I found this site honestly.
United Kingdom

Vimrc on: July 08, 2026
Wasn't expecting this exam to dive so deep into some topics but I guess that's normal. The AI assistant on this site helped me wrap my head around those tricky bits a little better tho.
Germany

Bootload on: August 12, 2026
Took time to see progress but passed eventually.
UAE

Anycast on: September 08, 2026
I not feel confident at first but practice questions on this website help me learn lots.
Croatia

Manpage on: August 19, 2026
Practice questions here were really helpful but still not fully confident.
Switzerland

Scsi on: June 13, 2026
This cert was tougher than I thought but using practice questions from this website made it doable.
United States

Uptime on: September 16, 2026
This cert was tough but doable.
Germany

Patchset on: July 20, 2026
This exam was a real headache but the practice questions here saved me. So glad I found this website honestly.
Netherlands

Patchset on: August 10, 2026
This exam harder than I thought but with these practice questions you still got a fair shot.
Australia

Systemd on: August 09, 2026
This website saved me time and money passed this exam.
France

Symlink on: July 07, 2026
Crammed real hard with these questions saved me time and cash for sure.
Qatar

Parity on: July 11, 2026
Taking my time but it worked.
United Kingdom

Initd on: September 10, 2026
This exam was harder than expected but practice questions made it manageable.
New Zealand

Ping on: June 12, 2026
Fast cramming worked passed this exam.
Germany

Overclock on: August 03, 2026
The exam was tougher than I thought but doable with this site's practice questions.
United States

Hardlink on: August 22, 2026
Slow going but review time paid off.
Denmark

Zsh on: July 08, 2026
I wasn't feeling confident at first but after going through the practice questions on this site it got easier.
Hong Kong

nerdbyday on: July 25, 2026
This exam covered way more than I was ready for but at least the AI assistant on this site helped me pinpoint what I needed to focus on. Felt like a lifesaver when stuff got tricky man.
Finland

Tarball on: June 06, 2026
Studying for this exam took longer than I thought but with solid practice questions on this website I finally passed it.
Canada

Kmem on: August 04, 2026
I found this cert tough but practice questions from this website made the difference.
Lithuania

Multicast on: July 06, 2026
Didn’t feel ready at first but these practice questions made a difference.
Germany

Nullptr on: August 01, 2026
Too tired to study much relieved passed.
United States

Baud on: July 19, 2026
Balancing work and short study sessions for this exam was tough but finally getting through it felt like a relief.
Malta

Subnet on: July 08, 2026
Crammed quick with these questions and didn't spend a lot of money and after getting through it slow I passed the exam.
Kuwait

Unicast on: July 04, 2026
After long days at work I squeezed in short study sessions here and there and finally glad to have this cert off my back.
Luxembourg

Runlevel on: August 07, 2026
Studied late after work and passing was a relief.
Austria

Strace on: August 28, 2026
Wow the exam was super stressful. Using this website was a big help.
Switzerland

Tty on: September 01, 2026
Crammed with the help here, passed fine.
Switzerland

Tty on: July 11, 2026
Man this exam was tough but these questions on the site got me through it.
Estonia

TheCertMachine on: July 12, 2026
This exam was tougher than I thought but with the practice questions on this website it was doable.
Nigeria

Symlink on: July 15, 2026
Between hectic days at work and squeezing in short study sessions I finally knocked out this cert and feel so relieved.
Saudi Arabia

AI Explanation - verified by User8210 on: September 24, 2026
Question 8:
Correct answer: LLDP
LLDP (Link Layer Discovery Protocol) lets network devices advertise information about themselves to directly connected devices. It can reveal details such as:

The connected switch

The switch’s port/interface

Device and port descriptions

Sometimes VLAN or management information

Because the technician’s laptop works when connected to the same port as the VoIP handset, the physical port is likely functional. The technician can use LLDP information to identify exactly which switch and interface that port connects to.
Why the others are incorrect:

IKE: Establishes security associations for IPsec VPNs.

VLAN: Defines logical network segmentation; it does not identify a physical switch port.

netstat: Displays local network connections and statistics, not the upstream switch and port.

Manila, Philippines

AI Explanation - verified by User9460 on: September 22, 2026
Question 6:
Correct answer: B. SLA (Service-Level Agreement)
An SLA defines the expected level of service between a customer and a vendor. It commonly specifies:

How quickly the vendor must respond to incidents or requests

Availability or uptime requirements

Resolution time targets

Performance expectations and penalties for failing to meet them

Why the others are incorrect:

SOW (Statement of Work): Describes the work, deliverables, scope, and schedule.

MOA (Memorandum of Agreement): Documents an agreement in which parties commit to specific responsibilities.

MOU (Memorandum of Understanding): Records a general intention to cooperate; it may not be legally binding.

Therefore, the agreement that defines the vendor’s required response time is an SLA.
Dallas, United States

AI Explanation - verified by User2976 on: September 24, 2026
what is athena
Amazon Athena is a serverless interactive query service that lets you run SQL queries directly against data stored in services such as Amazon S3.
Key points:

No servers or database infrastructure to provision.

Uses standard SQL.

Supports formats such as JSON, CSV, Parquet, and ORC.

You typically define the table structure with AWS Glue Data Catalog or Athena’s own schema definitions.

Charges are generally based on the amount of data scanned, so partitioning and columnar formats can reduce cost.

It does not copy the data into a separate database; it reads the files in S3 when you run a query.

For Question 2, Athena is appropriate because the logs already exist in S3 and the company needs simple, on-demand analysis with minimal operational overhead.
Bengaluru, India

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 196:
Correct answer: D — <apex:stylesheet>
Use <apex:stylesheet> in a Visualforce page to reference an external CSS file:

xml <apex:page> <apex:stylesheet value="{!URLFOR($Resource.MyStyles, 'styles/main.css')}" /> </apex:page>

This is commonly used with a static resource, which is the recommended way to package CSS for Salesforce deployments.

<apex:includeScript> is for JavaScript.

<apex:includeStyle> is not a valid Visualforce component.

<apex:require> is not the Visualforce tag used to load CSS.

The value attribute specifies the CSS file’s URL.
Chennai, India

AI Explanation - verified by User9895 on: September 11, 2026
Question 12:
Correct answer: B. Port security
A MAC flooding attack sends many fake source MAC addresses to a switch. This can overwhelm the switch’s MAC address table, causing it to broadcast traffic out multiple ports and potentially allowing an attacker to capture traffic.
Port security mitigates this by:

Limiting the number of MAC addresses allowed on a switch port

Restricting ports to specific known MAC addresses

Taking an action—such as dropping frames or shutting down the port—when the limit is exceeded

Why the others are less suitable:

Load balancer: Distributes application traffic; it does not protect switch MAC tables.

IPS: May detect some attack traffic, but is not the primary control for switch-port MAC limits.

NGFW: Filters network traffic at the firewall, but does not directly control MAC addresses learned by a switch.

Cambridge, United Kingdom

AI Explanation - verified by ajaykamath69055 on: September 22, 2026
Question 9:
Correct answer: C — Markdown-based text boxes
In a Databricks dashboard, use a text box with Markdown to add headings, labels, descriptions, and section dividers. For example:

# Development

# Testing

# Production

This lets all three sections remain on the same dashboard while clearly identifying them.
Why the others are incorrect:

Separate endpoints: relate to compute or connectivity, not dashboard labels.

Separate queries: retrieve or transform data but do not designate visual sections.

Direct text written into the dashboard in editing mode: dashboards use text boxes, typically with Markdown formatting, rather than arbitrary text placed directly on the canvas.

Chiyoda City, Japan

AI Explanation - verified by User6710 on: September 24, 2026
Question 148:
Correct answer: D — Provide a third-party attestation report.
Customers want an independent opinion that the organization’s security controls are designed and operating effectively. A third-party attestation report—such as a SOC 2 report—is produced by an independent auditor and can be shared with multiple customers.
Why the other options are less suitable:

Penetration test: Tests for exploitable vulnerabilities; it does not provide a broad opinion on whether security controls operate effectively.

Annual self-assessment: Not independent, so it provides less assurance.

Allow each client the right to audit: Inefficient because every customer may conduct a separate audit, creating duplicated effort and disruption.

The key clues are “independent opinion” and serving several customers with one evaluation.
Biloxi, United States

AI Explanation - verified by User9738 on: September 22, 2026
Question 84:
A resposta correta é C: configurar o SageMaker para usar uma VPC com um endpoint do Amazon S3.
O endpoint permite que os notebooks do Amazon SageMaker Studio acessem os dados armazenados no Amazon S3 por uma conexão privada dentro da AWS. Assim, o tráfego pode permanecer na rede da AWS, sem precisar passar pela internet pública.
Isso ajuda a:

Controlar o fluxo de dados entre S3 e SageMaker;

Aplicar regras de segurança por meio da VPC;

Reduzir a exposição dos dados;

Permitir acesso privado ao bucket do S3.

As outras opções não atendem ao requisito:

Amazon Inspector: avalia vulnerabilidades, mas não gerencia o fluxo de dados.

Amazon Macie: ajuda a descobrir e proteger dados sensíveis no S3, mas não cria a conexão com o SageMaker.

S3 Glacier Deep Archive: é uma classe de armazenamento para arquivamento, não uma solução de conectividade.

São Paulo, Brazil

AI Explanation - verified by User7918 on: September 25, 2026
Question 7:
Correct answer: D — From Power Query, merge the Orders query and the Order Line Items query.
Why:

Orders contains order-level information, such as the order date.

Order Line Items contains the products, quantities, and line amounts associated with each order.

Merging them on the order key, such as OrderID, places the order date alongside each line item. This allows you to calculate total order value and analyze it over time.

Product attributes can remain in the Products table and be related to the resulting line-item table through ProductID.

Using Power Query performs the merge during data refresh. The resulting model requires less work when users interact with report visuals, helping minimize interaction times.
The other choices are less suitable:

Merging line items with products addresses product attributes but does not first provide the order-level date and value needed for time analysis.

DAX calculated columns or lists add unnecessary model complexity.

Calculating order counts is not the first requirement and does not combine the required order and line-item data.

Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by abhijit_hit on: September 16, 2026
Question 83:
???? ?????: D — AWS Compute Optimizer ???????
AWS Compute Optimizer ????????? ??????? ???????????????? ??? resource-?? utilization ???????? ??? ????:

Amazon EC2 instances — ???????? ?? ?? ??????? CPU, memory ??? instance size ???????? ???????

AWS Lambda functions — memory configuration ?????????? ???????

Amazon EBS volumes — volume type ?? size optimize ???? ???????

??????? ECS workloads — resource configuration ? cost optimization-?? ???????

??? historical utilization metrics ???????? ??? ??? resource resize ?? configuration ?????????? recommendations ????? ??? ???? code ????? ??? ??—? ?????? ??? least development effort?
???????? ??? ????

Memory ? compute usage ?????????? ???? custom code ????? ???? development ? maintenance ??????

Cost allocation tags ???? ????? ??? ?????? ???? ??????? ???; inefficient resource ??????? ?? recommendation ???? ???

CloudTrail resource ???? ?? API activity ??????, resource utilization ????

???: Compute Optimizer recommendation ???? resource-?????? ??????? configuration-? ????? ??? ???????? historical metrics ?????? ???? ????
Kolkata, India

AI Explanation - verified by User5788 on: September 02, 2026
Question 28:
Correct answers: C. Honeypots and E. DNS sinkhole
Both are designed to detect or observe attackers who have gained access to a network:

Honeypots: Decoy systems or services made to attract attackers. Legitimate users should not interact with them, so activity there is a strong indicator of malicious behavior.

DNS sinkholes: Redirect requests for known malicious domains to a controlled internal system. This can reveal infected hosts attempting to contact command-and-control infrastructure.

Why the others are incorrect:

Tokenization: Replaces sensitive data with non-sensitive tokens.

CI/CD: Automates software development, testing, and deployment.

Threat modeling: Identifies and analyzes potential threats before or during system design.

Data obfuscation: Makes data harder to understand or interpret.

The answer key’s C and E are correct.
Quezon City, Philippines

AI Explanation - verified by User6966 on: September 23, 2026
Question 14:
Question 14 asks which Snowflake object can limit credit consumption within an account.
The correct answer is B — Resource Monitor.
A resource monitor lets administrators:

Set credit quotas for an account or individual virtual warehouses.

Define monitoring intervals.

Trigger actions when usage reaches thresholds, such as sending notifications or suspending a warehouse.

Help control unexpected warehouse spending.

Why the other options are incorrect:

Account Usage: Provides historical usage and billing data; it does not enforce credit limits.

Warehouse Limit Parameter: Not the Snowflake object used for account-wide credit controls.

Credit Consumption Tracker: Not a standard Snowflake object.

A resource monitor can suspend assigned warehouses when limits are reached. However, account-level resource monitors and warehouse-level resource monitors have different enforcement behavior, so read the wording carefully in exam questions.
Columbus, United States

AI Explanation - verified by User6298 on: September 22, 2026
Question 279:
Correct answer: D — Data changes are independently reviewed by another group.
In an environment where responsibilities are shared, the strongest detective control is independent review. A separate group can compare changes against authorized requests, approvals, and business requirements, helping identify unauthorized or inappropriate modifications.
Why the others are weaker:

A. Periodically rotate responsibilities: May reduce some risks, but it does not directly detect unauthorized changes.

B. Review segregation-of-duties conflicts: Identifies incompatible access combinations, not whether a specific data change was unauthorized.

C. Log changes in an outside application: Logs provide evidence, but someone must review and analyze them. Logging alone does not detect misuse.

D. Independent review: Directly detects unauthorized changes and reduces the risk that the person making the change can conceal it.

The key exam concept is that independence strengthens detective controls, especially when duties and access are shared.
Hyderabad, India

AI Explanation - verified by User3500 on: September 22, 2026
Question 101:
Correct answer: D — Due diligence
The analyst is evaluating a SaaS vendor before allowing the organization to use its service. Requesting and reviewing the vendor’s SOC 2 report helps determine whether the vendor has appropriate security and operational controls.

Due diligence: Researching and evaluating a third party before entering or continuing a business relationship.

Internal audit: Evaluates controls within the organization itself.

Penetration testing: Actively tests systems for exploitable vulnerabilities.

Attestation: A formal statement or report—such as a SOC 2 report—provided by an independent party about an organization’s controls.

The SOC 2 report is an attestation product, but the analyst’s activity—reviewing it to assess the vendor—is due diligence.
Essex, United States

AI Explanation - verified by User1726 on: September 17, 2026
Question 3:
Question 3: Correct answer — D: Host A is the ERSPAN source, and Host B is the traffic analyzer.
Key concepts:

The ERSPAN source is the device or interface whose traffic is being copied.

The ERSPAN destination is the device receiving the encapsulated copy and forwarding it to the traffic analyzer.

The local monitor session number is locally significant. Therefore, the source and destination do not need matching session IDs such as 47 or 48.

The erspan-id identifies the ERSPAN stream and must correspond between the source and destination configuration.

Thus, options claiming that session ID 47 or 48 must match are incorrect. Based on the exhibit referenced by the question, traffic flows from Host A toward Host B, making A the source and B the analyzer.
Paterson, United States

AI Explanation - verified by User7103 on: September 22, 2026
Question 29:
Correct answer: A. Hashing
A hash creates a fixed-length value representing the software’s contents. After release, the company can calculate the file’s hash again and compare it with the original:

Matching hashes: The software likely has not changed.

Different hashes: The software was modified or corrupted.

Why the others are incorrect:

Encryption: Protects confidentiality by making data unreadable; it does not primarily detect changes.

Baselines: Define an approved system or configuration state, but they are not the specific integrity mechanism here.

Tokenization: Replaces sensitive data with substitute values.

In real deployments, a digital signature is often preferred because it verifies both integrity and the publisher’s identity, but hashing is the best available answer.
Opelika, United States

AI Explanation - verified by User5051 on: September 25, 2026
i am getting the option to create folder on right clicking the different components like Forms, /email templates etc not on workspace
That is expected. In Marketo, folders are created inside each Design Studio asset type, not directly at the workspace level.
For example:

Design Studio > Emails ? create an email-template folder

Design Studio > Landing Pages ? create a landing-page-template folder

Add the relevant assets to each folder

Right-click the folder and choose Share Folder

Select the destination workspaces

You generally need to share the email-template folder and landing-page-template folder separately because they belong to different asset areas. The folder is created in the Center of Excellence workspace; Default is not required unless it is one of the workspaces you want to share with.
Faridabad, India

AI Explanation - verified by User7219 on: September 08, 2026
Question 87:
Answer: Footprinting the internal network
I can’t see the referenced image, so this explanation is based on the question text and answer choices. The unusual DNS activity likely shows queries for internal hostnames or internal naming patterns. Gathering those names helps an attacker map the organization’s internal systems, domains, and network structure—this is internal network footprinting.
Why the other options are less likely:

Determining ISP-assigned address space: Usually involves public reconnaissance, such as WHOIS or regional Internet registry information.

Bypassing DNS sinkholing: Would require evidence that malicious domains are resolving outside the organization’s sinkhole controls.

Achieving initial access: DNS log entries alone do not demonstrate compromise or entry.

Exfiltrating data: DNS tunneling generally involves repeated queries containing encoded or unusually long data, not merely internal host discovery.

The answer key’s C is reasonable, though the missing image limits certainty.
Ibadan, Nigeria

AI Explanation - verified by User5344 on: September 21, 2026
Question 58:
Correct answer: A — Audit logging is not enabled.
For a shared CRM system, audit logs are essential for:

Tracking who accessed or changed customer information

Detecting unauthorized activity

Supporting accountability and investigations

Providing evidence for compliance and incident response

Without logging, the organization may be unable to determine what happened, when it happened, or which user performed an action. This is especially serious for systems containing sensitive customer data.
Why the others are less concerning:

Single sign-on not enabled: SSO improves convenience and centralized authentication, but it is not essential for access control.

Complex passwords not required: This weakens authentication, but other controls may reduce the risk.

Security baseline not consistently applied: A concern, but it is less specific and less immediately damaging than having no activity records at all.

The key exam principle is that logging provides accountability and supports the detection of inappropriate access.
Hyderabad, India

AI Explanation - verified by User3503 on: September 15, 2026
Question 104:
Correct answer: C. WAF (Web Application Firewall)
A WAF is designed to protect web applications and web portals by inspecting HTTP/HTTPS traffic. It can detect and block attacks such as:

SQL injection

Cross-site scripting (XSS)

Malicious or malformed web requests

Some application-layer attacks

Why the others are less suitable:

Layer 4 firewall: Filters based mainly on IP addresses, ports, and transport protocols; it cannot deeply inspect web application content.

NGFW: Provides advanced network filtering and may include application awareness, but a WAF is more specifically designed to protect web applications.

UTM: Combines several security functions in one appliance, but it is not the most targeted solution for a web portal.

Because the requirement specifically involves protecting a customer-facing web service, a WAF is the best choice.
New York, United States

AI Explanation - verified by User3698 on: September 22, 2026
Question 12:
The answer key selects D — Exploitation, but the question is imperfect.
In the Cyber Kill Chain:

Reconnaissance: Gathering information about the target.

Weaponization: Creating or combining a malicious payload with a delivery method.

Delivery: Sending the payload, such as through phishing.

Exploitation: Triggering a vulnerability or weakness to gain execution or access.

Social engineering exploits a human weakness, so the moment the victim is manipulated and the attacker gains initial access, Exploitation is the closest available option.
However, the phrase “does not want to lose access” more specifically suggests Installation or Command and Control, where an attacker establishes persistence or maintains remote access. Those stages are not offered.
Therefore, D is the best answer among these choices, but it should not be interpreted as meaning that exploitation itself is the persistence stage. The key distinction is: gaining access through a human weakness is exploitation; maintaining that access would normally involve later kill-chain stages.
Cuiabá, Brazil

AI Explanation - verified by User6282 on: September 15, 2026
Question 18:
Correct answer: B — ODBC
Power BI Desktop does not provide a dedicated Cassandra connector in the scenario. Cassandra can still be accessed through an ODBC driver:

Install a Cassandra-compatible ODBC driver.

Configure a data source name (DSN), if required.

In Power BI Desktop, select Get Data > ODBC.

Choose the configured DSN and connect.

Why the other options are incorrect:

Microsoft SQL Server database: Connects to SQL Server, not Cassandra.

OLE DB: Requires a compatible OLE DB provider; this is not the standard choice for Cassandra in Power BI.

OData: Requires Cassandra data to be exposed through an OData service, which is not the normal direct connection method.

The answer key’s B is correct because ODBC provides the generic connectivity layer between Power BI and Cassandra.
Nandyal, India

AI Explanation - verified by User1558 on: September 17, 2026
Question 10:
Correct answer: Yes (A).
For a SQL Server Always On availability group listener on Azure VMs, the Azure internal load balancer’s load-balancing rule must have Floating IP enabled.
Why:

The listener uses a virtual IP address shared by the availability-group replicas.

Floating IP, also called Direct Server Return (DSR), allows the SQL Server nodes to respond using the listener’s IP address rather than their individual VM IP addresses.

This is required for the availability-group listener to function correctly with an Azure internal load balancer.

The rule should also use an appropriate health probe and the listener’s frontend private IP address. Client IP session persistence alone is not sufficient, which is why Question 9’s proposed solution is incorrect.
Edmonton, Canada

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 180:
Question 180 is a quality cost classification question. The image containing the individual costs and classifications isn’t visible here, so I can’t reliably match each item or confirm whether the stated answer A is correct.
The four classifications you need are:

Prevention costs – costs incurred to stop defects occurring, such as staff training, quality planning and supplier evaluation.

Appraisal costs – costs of checking whether products meet standards, such as inspection, testing and quality audits.

Internal failure costs – costs of defects found before delivery to customers, such as scrap, rework and retesting.

External failure costs – costs of defects found after delivery, such as warranty claims, returns, complaints and product recalls.

A useful exam rule is:
Prevent ? Appraise ? Fail internally ? Fail externally
Please transcribe the descriptions shown in the image, and I can classify each one and check the answer key.
Maseru, Lesotho

AI Explanation - verified by User1054 on: September 25, 2026
Question 1:
Correct answer: B — Create a custom pool.
A custom Apache Spark pool lets you provision dedicated Spark compute for the bronze and silver workloads. Assigning the workloads to separate pools prevents them from competing for the same shared Spark resources and provides better control over node size, autoscale settings, and workload capacity.
Why the other options are less suitable:

Disable high concurrency: This changes session-sharing behavior but does not provide dedicated compute or true workload separation.

Modify the number of executors: Adjusts resources within a Spark job; it does not isolate bronze and silver processes.

Set the default environment: Controls libraries and runtime configuration, not compute isolation.

Important: The supplied explanation appears incorrect. It discusses isolated compute in Azure Synapse, including an XXXLarge node requirement, rather than explaining the Fabric answer. For this question, the relevant concept is using a custom Spark pool to separate workloads.
Johannesburg, South Africa

AI Explanation - verified by User6797 on: September 22, 2026
Question 27:
Question 27: No — the solution does not meet the goal.
Azure Multi-Factor Authentication (MFA) verifies a user’s identity using additional authentication factors, such as a phone or authenticator app. It helps prevent unauthorized access, but it does not encrypt administrative credentials during automated deployment.
A more suitable solution would be Azure Key Vault, which can securely store secrets, passwords, certificates, and keys. Deployment tools or templates can retrieve the credentials from Key Vault without exposing them directly in scripts or templates.
Therefore:

MFA: Protects sign-in and authentication.

Azure Key Vault: Protects deployment secrets and credentials.

Answer: No (B).

Singapore, Singapore

AI Explanation - verified by User2158 on: September 14, 2026
Question 3:
Question 3 is a network-infection investigation hotspot. You’re expected to inspect the logs on each host and the firewall, then determine:

Which host first communicated with the suspected malicious source

Whether that host initiated suspicious traffic or merely received it

Which other hosts show evidence of infection, such as connections from the originating host

Which hosts have no related suspicious activity and are therefore clean

The answer key marks A, but the actual host/firewall images and log details are not visible here, so I can’t independently verify that selection. The correct reasoning is to identify the earliest infection event, not simply the host with the most alerts.
Typical evidence to look for includes:

An outbound connection to a suspicious external address

A downloaded or executed malicious file

Later lateral connections from that host to other internal systems

Firewall logs showing the direction and timing of the traffic

If you provide the screenshots or transcribe the logs for each host and the firewall, I can walk through the infection path and verify the hotspot answer.
Québec, Canada

AI Explanation - verified by Tholang2016 on: September 01, 2026
Question 158:
Answer: D — Develop the process.
In Maylor’s 4D project life cycle, the stages are:

Define – establish the project’s objectives, scope, feasibility and requirements.

Design – plan how the project will be carried out, including resources, schedules and controls.

Deliver – execute the project and produce the required outputs.

Develop – close the project formally and capture learning for future projects.

The activities in the question are all project-closure activities:

Filing documentation and records

Closing project and accounting systems

Settling costs

Handing over the completed work and obtaining sign-off

Reviewing performance and giving feedback

Therefore, the answer key’s D is correct. The key clue is the combination of handover, formal closure and post-project review, which belongs to the final Develop stage rather than the delivery stage.
Maseru, Lesotho

AI Explanation - verified by User8779 on: September 01, 2026
Question 6:
Correct answer: D — Coldline Storage
For disaster recovery backups, data is usually stored for long periods and retrieved only during an incident. Coldline Storage is designed for data accessed less than once per quarter, including:

Disaster recovery backups

Long-term backup retention

Data archiving that still needs occasional access

Why the others are less suitable:

Multi-Regional Storage: Intended for frequently accessed data needing broad geographic availability; it costs more.

Regional Storage: Suitable for frequently accessed data within one region.

Nearline Storage: Intended for data accessed roughly once per month, such as monthly backups.

Coldline Storage: Better fit for backups accessed only during a disaster or occasional recovery event.

The key exam clue is backup data for disaster recovery: infrequent access with a need for relatively quick retrieval, which points to Coldline, rather than Archive Storage.
San Jose, United States

AI Explanation - verified by User6816 on: September 02, 2026
Question 2:
The answer key shows C, but I believe the correct answer is B: Continuously retrain the model on a combination of existing data and the new data.
Why:

User preferences change, so the model must learn from recent data.

Keeping the existing data helps preserve knowledge of older patterns and provides a broader training distribution.

Training only on new data can cause catastrophic forgetting and may overfit if the new dataset is small.

The new data should not automatically be used as the test set, because it is needed for training and the model must still be evaluated on separate, representative data.

Therefore, use a pipeline that periodically retrains the model with both historical and newly collected examples. The answer key’s C would be appropriate only if the goal were evaluating the existing model on new, unseen data—not adapting it to changing preferences.
Chennai, India

AI Explanation - verified by User5548 on: September 10, 2026
Question 149:
Correct answer: D — All the statements.
Beyond Budgeting is a management approach designed to replace rigid annual budgets with more flexible, decentralized management.
Each statement fits:

Clear principles and boundaries — Employees have freedom, but decisions must remain within clear organizational values, policies and limits.

High degree of freedom — Managers are trusted to make decisions rather than seeking continual approval from senior management.

Frontline customer responsibility — Customer-facing managers should be empowered to manage customer relationships and respond quickly to needs.

Transparent and ethical information — Information should be openly available and used honestly, supporting trust and informed decision-making.

Therefore, all four statements describe Beyond Budgeting.
Maseru, Lesotho

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 199:
Correct answers: B and C

B — Both inner and outer classes can be declared as with sharing.

An outer class and its inner class can each explicitly specify their own sharing behavior.

C — Inner classes do not inherit sharing settings from the container class.

An inner class has an independent sharing declaration. If its behavior matters, declare with sharing or without sharing explicitly.
Example:

apex public with sharing class OuterClass { public with sharing class InnerClass { // Explicitly uses sharing rules } }

with sharing enforces record-level sharing rules, but it does not automatically enforce object permissions or field-level security.
Chennai, India

AI Explanation - verified by User8545 on: September 26, 2026
Question 11:
Correct answer: A — Captive portal
A captive portal is a web page that users must view or interact with before receiving network access. It is commonly used for temporary or guest access in places such as hotels, airports, and company guest networks.
The user may need to:

Accept terms of use

Enter a temporary code or credentials

Provide basic registration information

Why the others are incorrect:

Enterprise authentication — Authenticates organizational users, often with centralized identity services; it is not specifically designed for temporary guest access.

Ad hoc network — A temporary device-to-device network, not an authentication process.

WPA3 — A wireless security standard. It protects Wi-Fi access but does not provide the web-based temporary access workflow described here.

Quezon City, Philippines

AI Explanation - verified by User4912 on: September 21, 2026
Question 13:
Correct answer: B — table name, parent table name, any table name (wildcard)
ServiceNow evaluates table-level Access Control (ACL) rules from most specific to least specific:

The specific table — for example, incident

The parent table — for example, task

The wildcard table — *, which applies broadly

This ordering allows a specific ACL to override or refine a more general ACL. For example, an ACL on incident is checked before one on its parent task, and both are checked before a wildcard ACL.
The key exam principle is: specific rules are evaluated before inherited or general rules. Note that ACL evaluation also considers the required roles and conditions; simply finding an ACL does not automatically grant access.
Chennai, India

AI Explanation - verified by User6465 on: September 16, 2026
Question 18:
For Question 18, I believe the answer key is incorrect.
Correct answers: A, B, and D

Record changes — a flow can start when a record is updated or otherwise changes.

Schedules — a flow can run at a specified date/time or on a schedule.

Record inserts — a flow can start when a new record is created.

Why the others are incorrect:

Subflows are reusable flow components called by another flow; they are not normally trigger types.

Record views do not generally initiate a Flow Designer flow.

So the stated answer A, B, C should likely be A, B, D.
Sapiranga, Brazil

AI Explanation - verified by khamankopane66 on: September 14, 2026
Question 8:
Question 8 tests the control environment—management’s attitudes and actions toward controls, risk and ethical behaviour.
The manager:

Suspended an operator who correctly refused to use unsafe equipment.

Rewarded another operator for using the equipment despite the broken safety guard.

This sends a clear message that meeting production targets is more important than health and safety.
Therefore, the correct answers are:

A — Management is not particularly concerned with managing risks.

The manager knowingly allowed an unsafe risk to continue.

B — Employees will perceive that management does not care about health and safety risks.

Management’s actions communicate its real priorities more strongly than its policies.

C — This factory’s safety record is likely to be poor.

Employees may copy the rewarded behaviour and ignore safety procedures, increasing accidents and injuries.
D is not a suitable conclusion: although employees may be motivated to maintain productivity, they are being motivated in an unsafe and inappropriate way. E is clearly false because management’s attitude is neither proportionate nor considered.
Maseru, Lesotho

AI Explanation - verified by User6020 on: September 23, 2026
Question 1:
Question 1 is asking about the benefits and requirements of Direct Product Profitability (DPP).
The correct answers are A, B and C.

A — Improved management of storage space: Correct.

DPP calculates the profitability of individual products after considering costs such as warehousing, handling and delivery. Management can identify products that occupy substantial space but generate low profit.

B — Improved supplier relationships: Correct.

More detailed product-cost information supports better discussions with suppliers about prices, delivery arrangements, packaging and product range decisions.

C — Improved pricing decisions: Correct.

DPP provides a more realistic product profit figure than simply comparing selling price with purchase cost. This helps management set prices and negotiate discounts.

D — Non-product-specific costs must be apportioned: Incorrect.

DPP aims to allocate costs using appropriate cost drivers, rather than make arbitrary apportionments. For example, warehouse handling costs may be assigned based on handling activity.

E — Profitability of each customer group: Incorrect.

DPP focuses on the profitability of individual products, not customer groups. Customer profitability analysis is a separate technique.
Maseru, Lesotho

AI Explanation - verified by User5989 on: September 19, 2026
Question 51:
Question 51 is asking which Microsoft 365 usage report provides each metric:

Storage usage of files stored in Microsoft Teams: SharePoint site usage report

- Files uploaded to Teams channels are stored in the team’s underlying SharePoint site. - The SharePoint report therefore shows storage consumption for those files.

Number of active users per team: Microsoft Teams usage report

- This report provides team-level metrics, including active users and activity for each team.
Important: The supplied answer key appears questionable. It assigns the second requirement to the Teams user activity report, but that report is primarily user-focused—it shows activity for individual users, such as messages, meetings, calls, and audio/video activity. “Active users per team” is a team-level metric and is better matched to the Microsoft Teams usage report.
So the likely correct mapping is:

SharePoint site usage report

Microsoft Teams usage report

The exact report names can vary slightly between Microsoft 365 admin center versions.
Lisbon, Portugal

AI Explanation - verified by User9951 on: September 02, 2026
Question 7:
The correct choices are B and D.

D — Create sibling resource pools for the Production VMs and Test VMs.

This separates the workloads into distinct resource pools under the cluster, so their resource allocation can be managed independently.

B — Configure a memory reservation on the Production resource pool.

Set the reservation to the amount of memory the Production VMs require. A reservation guarantees that memory under contention, provided the cluster has sufficient physical resources.
Why the others are insufficient:

Shares only determine relative priority when resources are scarce; they do not guarantee memory.

A parent resource pool alone does not provide a guarantee.

A child pool for Test VMs does not reserve memory for Production.

DRS balances workloads, but it does not by itself guarantee that a VM receives its full configured memory. The reservation provides that guarantee.
South Tangerang, Indonesia

AI Explanation - verified by Tholang2016 on: September 01, 2026
Question 124:
Correct answer: B — “A course of action, including specification of resources required, to achieve a specific objective.”
This is CIMA’s definition of strategy. It highlights that strategy is not merely a broad intention or a list of goals; it explains how an objective will be achieved, including the resources needed.
Why the other options are less suitable:

A: Describes a broad purpose and direction, but is not the specific CIMA definition.

C: “Scoping out” activities is too vague and incomplete.

D: Combines long-term goals, strategies and policies, but describes a wider strategic-planning statement rather than the definition of strategy itself.

In exam questions, distinguish objectives—what the organisation wants to achieve—from strategy—the course of action and resources used to achieve it.
Maseru, Lesotho

AI Explanation - verified by User5231 on: September 04, 2026
Question 127:
Correct answer: D

10 TB with maximum I/O performance: Use EC2 instance store. It provides very high-throughput, low-latency local storage suitable for temporary video-processing data. The application must tolerate data loss because instance store is ephemeral.

300 TB of highly durable media: Use Amazon S3, which is designed for highly durable object storage and can scale to this size.

900 TB of inactive archival media: Use S3 Glacier, which provides lower-cost storage for data that is rarely accessed.

Why the other options are weaker:

A: Amazon EBS offers high performance but is not the best fit for the question’s “maximum possible I/O” requirement compared with local instance store.

B: Amazon EFS is durable and shared, but is generally more expensive and less suitable for very large archival storage.

C: Uses EC2 instance store for performance, but incorrectly uses EFS for the 300-TB durable tier and S3 rather than Glacier for archival data.

The key distinction is: instance store for temporary high-speed processing, S3 for durable active content, and S3 Glacier for low-cost archival storage.
Stuttgart, Germany

AI Explanation - verified by User3618 on: September 21, 2026
Question 1:
Question 1 asks for two ways to iterate through a List<Account>.

A is valid:

apex for (Account theAccount : AccountList) { // process theAccount }
This is Apex’s enhanced for loop. Each element is assigned to theAccount.

D is conceptually valid, using an index:

apex for (Integer i = 0; i < AccountList.size(); i++) { Account theAccount = AccountList[i]; }
However, the question displays AccountList.Size(). Apex method names are case-sensitive, so the correct method is size(), not Size().

B is invalid because for(AccountList) is not valid loop syntax.

C is invalid because each item is an Account, not a List.

Important: The answer key shows A and D, but D is only correct if Size() is a capitalization typo and should be size().
Santos, Brazil

AI Explanation - verified by User6966 on: September 23, 2026
Question 19:
Correct answer: A, B, C, D, and E — all listed options.
Snowflake supports MFA authentication through:

JDBC

SnowSQL

Snowflake Web Interface (UI)

ODBC

Python connector

MFA adds a second verification factor, such as a passcode from an authenticator app, in addition to the username and password. The exact setup can differ by client—for example, the UI may prompt interactively, while connectors may use an MFA token cache or authenticator configuration.
The key exam point is that MFA is not limited to browser logins; Snowflake supports it across these major connection methods.
Columbus, United States

AI Explanation - verified by User6688 on: September 23, 2026
Question 43:
Correct answer: D — To ensure non-repudiation
S/MIME digital signatures use the sender’s private key to sign an email. The recipient can verify the signature with the sender’s public key, helping prove:

The message came from the claimed sender (authentication)

The message was not altered (integrity)

The sender cannot easily deny sending it (non-repudiation)

Why not C — To block phishing attacks?
A digital signature does not block phishing. It may help a recipient identify whether an email is genuinely signed by a trusted sender, but:

Attackers can send unsigned phishing emails.

Attackers may compromise a legitimate account and send signed malicious emails.

Users may still be tricked by a validly signed message.

S/MIME encryption protects confidentiality, while S/MIME signing primarily provides authentication, integrity, and non-repudiation. In this question, non-repudiation is the best and most specific answer.
Vacoas, Mauritius

AI Explanation - verified by n.brahm85b on: September 13, 2026
Question 399:
Correct answer: C. Right-to-audit clause
A right-to-audit clause in a vendor contract gives the organization permission to inspect or assess the vendor’s:

Security controls

Processes and procedures

Compliance evidence

Performance against contractual requirements

This is especially important for third-party risk management because the organization remains responsible for understanding how a service provider protects its data and systems.
Why the others are less appropriate:

Service-level agreement (SLA): Defines expected service performance, such as uptime and response times.

Memorandum of agreement (MOA): Documents a general agreement between parties, but does not necessarily provide audit rights.

Supply chain analysis: Identifies risks across suppliers and dependencies, but is not a contractual mechanism for reviewing vendor controls.

Cambridge, United Kingdom

AI Explanation - verified by puranikatul on: September 26, 2026
Question 146:
The correct answer is B: a spoke.
In IntegrationHub, a spoke is a ServiceNow application that packages integration content for a particular third-party system or business function. A spoke can contain:

Actions that call external APIs

Subflows

Connection and credential aliases

Supporting integration logic

For example, a Slack spoke may provide actions for sending messages or creating channels.
Why the other choices are less accurate:

Action — A reusable operation within a flow, such as “Create a record” or “Send email.”

Connection — Defines how ServiceNow authenticates and communicates with an external system.

Integration step — A general flow step, not the name for the packaged integration.

Therefore, third-party integrations provided through IntegrationHub are generally called spokes.
Bengaluru, India

AI Explanation - verified by User2174 on: September 08, 2026
Question 223:
Correct answer: D — Security-aware corporate culture
Effective information security governance depends on employees and management consistently understanding and supporting security responsibilities. A security-aware culture helps ensure that policies, risk decisions, and controls are actually followed across the organization.
Why the other options are weaker:

Periodic vulnerability assessments: Identify technical weaknesses but do not establish governance or ensure risks are managed.

Established information security metrics: Help measure performance and report status, but measurement alone does not make governance effective.

Advanced security technologies: Support security operations, but governance is primarily about direction, accountability, decision-making, and alignment with business objectives.

The key distinction is that governance requires organization-wide behavior, accountability, and alignment, not merely tools or assessments.
Bengaluru, India

AI Explanation - verified by examspl on: September 20, 2026
Question 110:
Question 110: The best answer is C.
> Enable the collection and storage of Einstein Generative AI Audit Data on the Einstein Feedback setup page.
To validate Data Masking in the Einstein Trust Layer, the specialist first needs to ensure that the relevant Einstein Generative AI Audit Data is being collected and stored. This audit information can then be reviewed to confirm which values were masked before being sent to the model.

A is incorrect: Flow Debugger is for debugging Salesforce Flows, not Trust Layer masking.

B is incomplete/misleading: Requesting audit data may be part of reviewing the results, but collection and storage must first be enabled.

C is correct: It describes the initial validation step.

Note: The provided explanation is internally inconsistent: it says the answer is C but describes option B. The answer choice itself—C—is the stronger answer for “begin validating.”
Nepean, Canada

AI Explanation - verified by User7918 on: September 25, 2026
Question 9:
Question 9 tests appending queries and removing duplicates in Power Query.
The required sequence is:

Append Table1 and Table2 as a new query

- Appending places the rows from both tables underneath one another. - This is used because both tables contain the same type of data in the same column structure.

Select the product column in the appended query.

Choose Remove Rows > Remove Duplicates

- Power Query keeps one instance of each product value and removes repeated values.
Do not use Merge here. Merge combines columns from related tables based on matching keys, whereas this task requires combining rows from two similarly structured tables.
The answer key indicates option A, but the exact drag-and-drop labels are hidden in the supplied image. The underlying operation must be Append ? select the column ? Remove Duplicates.
Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User5867 on: September 05, 2026
Question 13:
The stated answer A, C, E appears incorrect. The better answer is C, D, and E.

C — Custom buttons display at the top and bottom of a page: Correct. In Salesforce Classic, buttons can appear in the page’s button areas, including the top and bottom of record pages.

D — Custom buttons are available for Person Accounts: Correct. Person Accounts use the Account object, so Account custom buttons can be available on Person Account layouts.

E — Custom buttons can reference an external app: Correct. A URL custom button can launch or navigate to an external application or website.

Why the others are incorrect:

A: JavaScript custom buttons are a Salesforce Classic feature and are not supported in Lightning Experience. They do not enhance Lightning Experience.

B: The User object does not generally support custom buttons in the same way standard business objects do.

So, this community answer key likely contains an error: C, D, E should be selected.
Patna, India

AI Tutor 👋 I’m here to help!

Cisco 350-901 Exam Prep Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 26 )

QUESTION: 65

Explanation:

QUESTION: 66

QUESTION: 67

QUESTION: 68

QUESTION: 69

Cisco 350-901 Exam Prep
Developing Applications using Cisco Core Platforms and APIs (DEVCOR) (Page 26 )