Free 350-901 Exam braindumps download (350-901 exam dumps Free)

QUESTION: 135

There is a requirement to securely store unique usernames and passwords. Given a valid username, it is also required to validate that the password provided is correct.

Which action accomplishes this task?

Encrypt the username, hash the password, and store these values.
Hash the username, hash the password, and store these values.
Encrypt the username, encrypt the password, and store these values.
Hash the username, encrypt the password, and store these values.

Answer(s): A

Show Answer Next Question

QUESTION: 136

While developing an application following the 12-factor app methodology, which approach should be used in the application for logging?

Write a log to a file in the application directory.
Write a log to a file in /var/log.
Write the logs buffered to stdout.
Write the logs unbuffered to stdout.

Answer(s): D

Show Answer Next Question

QUESTION: 137

An application has initiated an OAuth authorization code grant flow to get access to an API resource on behalf of an end user.

Which two parameters are specified in the HTTP request coming back to the application as the end user grants access? (Choose two.)

access token and a refresh token with respective expiration times to access the API resource
access token and expiration time to access the API resource
redirect URI a panel that shows the list of permissions to grant
code that can be exchanged for an access token
state can be used for correlation and security checks

Answer(s): D,E

Show Answer Next Question

QUESTION: 138

A web application is susceptible to cross-site scripting.
Which two methods allow this issue to be mitigated? (Choose two.)

Use only drop downs.
Limit user input to acceptable characters.
Encrypt user input on the client side.
Use AES encryption to secure the script.
Remove all HTML/XML tags from user input.

Answer(s): B,E

Show Answer Next Question

QUESTION: 139

Why is end-to-end encryption deployed when exposing sensitive data through APIs?

Data transfers are untraceable from source to destination.
Data cannot be read or modified other than by the true source and destination.
Server-side encryption enables the destination to control data protection.
Traffic is encrypted and decrypted at every hop in the network path.

Answer(s): B

Show Answer Next Question

Free 350-901 Exam Braindumps Developing Applications using Cisco Core Platforms and APIs (DEVCOR) Questions 135–139 (page: 29)

QUESTION: 135

QUESTION: 136

QUESTION: 137

QUESTION: 138

QUESTION: 139

Free 350-901 Exam Braindumps
Developing Applications using Cisco Core Platforms and APIs (DEVCOR) Questions 135–139 (page: 29)