Is the 350-901 practice exam free?

Yes. ExamCademy offers all 490 350-901 practice questions for free with a registered account. No payment needed. Optional supporter features add AI explanations and spaced repetition study tools.

How accurate are the 350-901 practice questions?

All 350-901 questions are community-created and reviewed by moderators to align with Cisco's published exam objectives. The community continuously reports and fixes issues to keep content accurate and up to date.

How should I study for the 350-901 exam?

Start by browsing practice questions to identify weak areas. Use spaced repetition (Learn Mode) to focus study time on topics you struggle with. Combine practice questions with official Cisco documentation and hands-on experience for best results.

350-901 Practice Exam — Free 490+ Questions

490Practice Questions

3Study Modes

FreeTo Get Started

Topic:Sort:

Question 1

Using APIs

Question 2

Infrastructure and Automation

Question 3

Application Deployment and Security

Question 4

Using APIs

Question 5

Using APIs

Question 6

Using APIs

Question 7

Using APIs

Question 8

Software Development and Design

Question 9

Application Deployment and Security

Question 10

Application Deployment and Security

Question 11

Software Development and Design

Question 12

Using APIs

Question 13

Software Development and Design

Question 14

Infrastructure and Automation

Question 15

Software Development and Design

Question 16

Software Development and Design

Question 17

Using APIs

Question 18

Software Development and Design

Question 19

Application Deployment and Security

Question 20

Application Deployment and Security

Question 21

Using APIs

Question 22

Application Deployment and Security

Question 23

Application Deployment and Security

Question 24

Infrastructure and Automation

Question 25

Cisco Platforms

Page 1 of 20 • Questions 1-25 of 490

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

DRAG DROP -

Question Image

Refer to the exhibit. Drag and drop the code snippets from the left onto the item numbers on the right that match the missing sections in the cURL exhibit to complete the cURL request to FirePower Device Manager API to create objects. Not all code snippets are used.
Select and Place:

Question Image

An automated solution is needed to configure VMs in numerous cloud provider environments to connect the environments to an SDWAN. The SDWAN edge VM is provided as an image in each of the relevant clouds and can be given an identity and all required configuration via cloud-init without needing to log into the VM once online.
Which configuration management and/or automation tooling is needed for this solution?

A Ansible
B Ansible and Terraform
C NSO
D Terraform
E Ansible and NSO

Applications sometimes store configuration as constants in the code, which is a violation of the strict separation of configuration from code.
Where should application configuration be stored?

A environment variables
B YAML files
C Python libraries
D Dockerfiles
E INI files

DRAG DROP -

Question Image

Refer to the exhibit. Drag and drop the code snippets from the left onto the item numbers on the right that match the missing sections in the curl exhibit to complete the cURL request to FirePower Device Manager API to create objects. Not all code snippets are used.
Select and Place:

Question Image

A client is written that uses a REST API to interact with a server. Using HTTPS as the transport, an HTTP request is sent and received an HTTP response. The response contains the HTTP response status code: 503 Service Unavailable.
Which action is the appropriate response?

A Add an Authorization header that supplies appropriate credentials and sends the updated request.
B Resend the request using HTTP as the transport instead of HTTPS.
C Add an Accept header that indicates the content types that the client understands and send the updated request.
D Look for a Retry-After header in the response and resend the request after the amount of time indicated.

A developer has completed the implementation of a REST API, but when it is executed, it returns a 401 error message.
What must be done on the API to resolve the issue?

A Access permission to the resource must be granted, before the request.
B Configure new valid credentials.
C The requested API endpoint does not exist, and the request URL must be changed.
D Additional permission must be granted before the request can submitted.

Which two data encoding techniques are supported by gRPC? (Choose two.)

A XML
B JSON
C ASCII
D ProtoBuf
E YAML

Which two statements are considered best practices according to the 12-factor app methodology for application design? (Choose two.)

A Application code writes its event stream to stdout.
B Application log streams are archived in multiple replicated databases.
C Application log streams are sent to log indexing and analysis systems.
D Application code writes its event stream to specific log files.
E Log files are aggregated into a single file on individual nodes.

DRAG DROP -

Question Image

Refer to the exhibit. Drag and drop the correct parts of the Dockerfile from the left onto the item numbers on the right that match the missing sections in the exhibit to complete the Dockerfile to successfully build and deploy a container running a Python application. Not all parts of the Dockerfile are used.
Select and Place:

Question Image

Refer to the exhibit. A kubeconfig file to manage access to clusters is provided.
How many clusters are defined and which of them are accessed using username/password authentication versus certificate?

A two clusters; scratch
B three clusters; scratch
C three clusters; development
D two clusters; development

DRAG DROP -

Question Image

Refer to the exhibit. The self-service Webex bot is failing when many users attempt to interact with it at the same time. Drag and drop the code snippets from the left onto the correct item numbers on the right that match the missing sections in the exhibit to complete this code to handle this high-load situation.
Select and Place:

Question Image

Refer to the exhibit. Which configuration of method and parameter retrieves the health of a laptop connected to the network from Cisco DNA Center?

A PUT; network-health;
B GET; client-health;
C GET; network-device;
D POST; network-device;

Which two statements describe advantages of static code analysis over unit tests? (Choose two.)

A It checks for potential tainted data where input is not checked.
B It enforces proper coding standards and style.
C It performs a quick analysis of whether tests will pass or fail when run.
D It checks for race conditions in threaded applications.
E It estimates the performance of the code when run.

DRAG DROP -
An application is being built to collect and display telemetry streaming data. Drag and drop the elements of this stack from the left onto the correct element functions on the right.
Select and Place:

Question Image

Refer to the exhibit. A developer created the code, but it fails to execute.
Which code snippet helps to identify the issue?
A.

Question Image

B.

Question Image

C.

Question Image

D.

Question Image

Which two principles are included in the codebase tenet of the 12-factor app methodology? (Choose two.)

A An application is always tracked in a version control system.
B There are multiple codebases per application.
C The codebase is the same across all deploys.
D There can be a many-to-one correlation between codebase and application.
E It is only possible to have one application deployment per codebase.

Question Image

Refer to the exhibit. An application uses an API to periodically sync a large data set.
Based on the HTTP message sequence provided, which statements are true about the caching behavior seen in the scenario? (Choose two.)

A The full dataset was transmitted to the client twice.
B The dataset changed sometime between message #4 and #5.
C A partial dataset was transmitted to the client in message #4.
D The dataset did not change during the scenario.
E Messages #3 and #5 are equivalent.

DRAG DROP -
Drag and drop the git commands from the left into the correct order on the right to create a feature branch from the master and then incorporate that feature branch into the master.
Select and Place:

Question Image

Which two techniques protect against injection attacks? (Choose two.)

A input validation
B trim whitespace
C limit text areas to 255 characters
D string escaping of user free text and data entry
E only use dropdown, checkbox, and radio button fields

A web application is susceptible to cross-site scripting.
Which two methods allow this issue to be mitigated? (Choose two.)

A Use only drop downs.
B Limit user input to acceptable characters.
C Encrypt user input on the client side.
D Use AES encryption to secure the script.
E Remove all HTML/XML tags from user input.

Which transport protocol is used by gNMI?

A HTTP/2
B HTTP 1.1
C SSH
D MQTT

A developer has created an application based on customer requirements. The customer needs to run the application with the minimum downtime.
Which design approach regarding high-availability applications, Recovery Time Objective, and Recovery Point Objective must be taken?

A Active/passive results in lower RTO and RPO. For RPO, data synchronization between the two data centers must be timely to allow seamless request flow.
B Active/passive results in lower RTO and RPO. For RPO, data synchronization between the two data centers does not need to be timely to allow seamless request flow.
C Active/active results in lower RTO and RPO. For RPO, data synchronization between the two data centers does not need to be timely to allow seamless request flow.
D Active/active results in lower RTO and RPO. For RPO, data synchronization between the two data centers must be timely to allow seamless request flow.

How should a web application be designed to work on a platform where up to 1000 requests per second can be served?

A Use algorithms like random early detection to deny excessive requests.
B Set a per-user limit (for example, 5 requests/minute/user) and deny the requests from the users who have reached the limit.
C Only 1000 user connections are allowed; further connections are denied so that all connected users can be served.
D All requests are saved and processed one by one so that all users can be served eventually.

Question Image

Refer to the exhibit. Which two functions are performed by the load balancer when it handles traffic originating from the Internet destined to an application hosted on the file server farm? (Choose two.)

A Terminate the TLS over the UDP connection from the router and originate an HTTPS connection to the selected server.
B Terminate the TLS over the UDP connection from the router and originate an HTTP connection to the selected server.
C Terminate the TLS over the TCP connection from the router and originate an HTTP connection to the selected server.
D Terminate the TLS over the TCP connection from the router and originate an HTTPS connection to the selected server.
E Terminate the TLS over the SCTP connection from the router and originate an HTTPS connection to the selected server.

AppGigabitEthernet interface is used as data port for a container on a Cisco Catalyst 9000 Series Switch.
Which two interface configuration options should be used? (Choose two.)

A trunk interface
B bridged virtual interface
C SPAN port
D management interface
E subinterface

350-901Preview

About the 350-901 Exam

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

350-901Preview

About the 350-901 Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25