DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free Cisco 350-901 DEVCOR Practice Questions 2026 Part1 | Cisco Automation Core

Are you preparing for the Cisco 350-901 certification exam? SPOTO offers the Cisco 350-901 Premium File; all questions are aligned with the latest exam content and come with expert-provided answers. Our question banks cover the latest question types, core concepts, and detailed explanations, helping you familiarize yourself with the exam format and difficulty level. Whether you are reviewing core concepts or simulating a real exam environment, these resources will rapidly boost your confidence and readiness.
For over two decades, SPOTO has successfully helped numerous IT professionals secure their ideal positions at Fortune 500 companies. Download now to start practicing efficiently and ensure a high score on the actual exam. Don't miss this opportunity to pass your certification exam with ease!
Take other online exams

Question #1
How should a web application be designed to work on a platform where up to 1000 requests per second can be served?
A. Use algorithms like random early detection to deny excessive requests
B. Set a per-user limit (for example, 5 requests/minute/user) and deny the requests from the users who have reached the limit
C. Only 1000 user connections are allowed; further connections are denied so that all connected users can be served
D. All requests are saved and processed one by one so that all users can be served eventually
View answer
Correct Answer: B

View The Updated 350-901 Exam Questions

SPOTO Provides 100% Real 350-901 Exam Questions for You to Pass Your 350-901 Exam!

Question #2
Refer to the exhibit. The Ansible playbook is using the netconf_module to configure an interface using a YANG model. As part of this workflow, which YANG models augment the interface?
A. etf-interfaces and ietf-ip
B. ana-if-type and ietf-interfaces
C. etf-ip and iana-if-type
D. etf-ip and openconfig-interface
View answer
Correct Answer: C
Question #3
A web application has those requirements for HTTP cache control:The client browser must be prevented from storing responses that contain sensitive information.Assets must be downloaded from the remote server every time.Which header must the engineer use?
A. must-revabdate
B. no-store
C. public
D. private
E. Reveal Answer
View answer
Correct Answer: B
Question #4
A developer must create VLANs 2-5 on a remote Cisco NX-OS switch by using an Ansible playbook The playbook must meet these requirements
A. Option A
B. Option B
C. Option C
D. Option D
View answer
Correct Answer: A
Question #5
Refer to the exhibit. The YAML represented is using the ios_vrf module. As part of the Ansible playbook workflow, what is the result when this task is run?
A. RFs defined in the host_vars file are removed from the device
B. RFs not defined in the host_vars file are removed from the device
C. RFs not defined in the host_vars file are added to the device, and any other VRFs on the device remain
D. RFs are added to the device from the host_vars file, and any other VRFs on the device are removed
View answer
Correct Answer: D
Question #6
A developer has created an application based on customer requirements. The customer needs to run the application with the minimum downtime. Which design approach regarding high - availability applications, Recovery Time Objective, and Recovery Point Objective must be taken?
A. Active/passive results in lower RTO and RPO
B. Active/passive results in lower RTO and RPO
C. Active/active results in lower RTO and RPO
D. Active/active results in lower RTO and RPO
View answer
Correct Answer: A
Question #7
Where should distributed load balancing occur in a horizontally scalable architecture?
A. irewall-side/policy load balancing
B. etwork-side/central load balancing
C. ervice-side/remote load balancing
D. lient-side/local load balancing
View answer
Correct Answer: D
Question #8
Which two situations are flagged by software tools designed for dependency checking in continuous integration environments, such as OWASP? (Choose two.)
A. ublicly disclosed vulnerabilities related to the included dependencies
B. ismatches in coding styles and conventions in the included dependencies
C. ncompatible licenses in the included dependencies
D. est case failures introduced by bugs in the included dependencies
E. uffer overflows to occur as the result of a combination of the included dependencies
View answer
Correct Answer: AE
Question #9
Which two strategies are used to protect personally identifiable information? (Choose two.)
A. Encrypt data in transit
B. Encrypt hash values of data
C. Encrypt data at rest
D. Only hash usernames and passwords for efficient lookup
E. Only encrypt usernames and passwords for efficient lookup
F. Reveal Answer
View answer
Correct Answer: AC
Question #10
What are two steps in the OAuth2 protocol flow? (Choose two.)
A. The user is authenticated by the authorization server and granted an access token
B. The user's original credentials are validated by the resource server and authorization is granted
C. The user indirectly requests authorization through the authorization server
D. The user requests an access token by authentication and authorization grant presentation
E. The user requests the protected resource from the resource server using the original credentials
View answer
Correct Answer: AE
Question #11
A cloud native project is being worked on in which all source code and dependencies are written in Python, Ruby, and/or JavaScnpt. A change in code triggers a notification to the CI/CD tool to run the CI/CD pipeline.Which step should be omitted from the pipeline?
A. eploy the code to one or more environments, such as staging and/or production
B. uild one of more containers that package up code and all its dependencies
C. ompile code
D. un automated tests to validate the code
View answer
Correct Answer: C
Question #12
An organization manages a large cloud-deployed application that employs a microservices architecture across multiple data centers. Reports have been received about application slowness. The container orchestration logs show that faults have been raised in a variety of containers that caused them to fail and then spin up brand new instances.Which two actions can improve the design of the application to identify the faults? (Choose two.)
A. utomatically pull out the container that fails the most over a time period
B. mplement a tagging methodology that follows the application execution from service to service
C. dd logging on exception and provide immediate notification
D. o a write to the datastore every time there is an application failure
E. mplement an SNMP logging system with alerts in case a network link is slow
View answer
Correct Answer: BC
Question #13
Which two statements are considered best practices according to the 12-factor app methodology for application design? (Choose two.)
A. Application code writes its event stream to stdout
B. Application log streams are archived in multiple replicated databases
C. Application log streams are sent to log indexing and analysis systems
D. Application code writes its event stream to specific log files
E. Log files are aggregated into a single file on individual nodes
View answer
Correct Answer: AC
Question #14
Refer to the exhibit. An engineer writes a script to retrieve data from a REST API and must build support for cases where the response that contains data from the server may take a longer time than normal.Which code must be added to the snippet where the code is missing to catch such a timeout?
A. equest
B. equest
C. equest
D. equest
View answer
Correct Answer: D
Question #15
Which configuration stop must be performed on a Cisco IOS XE device to present collected data in Cisco DNA Center?
A. Create an SNMPv3 user account
B. Apply a telemetry profile
C. Synchronize the device and the data collector
D. Enable Cisco NetFlow collection
E. Reveal Answer
View answer
Correct Answer: B
Question #16
The response from a server includes the header ETag:W/"7eb8b94419e371767916ef13e0d6e63d". Which statement is true?
A. he ETag has a Weak validator directive, which is an optional directive
B. he ETag has a Strong validator directive, which it is incorrectly formatted
C. he ETag has a Weak validator directive, which is a mandatory directive
D. he ETag has a Strong validator directive
View answer
Correct Answer: A
Question #17
Which two situations are flagged by software tools designed for dependency checking in continuous integration environments, such as OWASP? (Choose two.)
A. Apublicly disclosed vulnerabilities related to the included dependencies
B. Bmismatches in coding styles and conventions in the included dependencies
C. Cincompatible licenses in the included dependencies
D. Dtest case failures introduced by bugs in the included dependencies
E. Ebuffer overflows to occur as the result of a combination of the included dependencies
View answer
Correct Answer: AE
Question #18
A developer must deploy a containerized application foe network device inventory management. The developer sets up a Kubernetes duster on two separate hypervisors. The SLA is not currently meeting a specified maximum value for network latencyjitter CPU/memory and disk I/O are functioning property. Which two design approaches resolve the issue'' (Choose two.)
A. Colocate services in the same pod
B. Replace the HDD drives with SSD drives
C. Enable IPv6 within the duster
D. Deploy the duster to a bare metal server
E. Upgrade the server NIC card
F. Reveal Answer
View answer
Correct Answer: AE
Question #19
Refer to the exhibit. Which URL retrieves the errors in the GigabitEthernet 1 interface? A) B) C) D)
A. AOption A
B. BOption B
C. COption C
D. DOption D
View answer
Correct Answer: D
Question #20
Which two statements about a stateless application are true? (Choose two.)
A. ifferent requests can be processed by different servers
B. equests are based only on information relayed with each request
C. nformation about earlier requests must be kept and must be accessible
D. he same server must be used to process all requests that are linked to the same state
E. o state information can be shared across servers
View answer
Correct Answer: AB
Question #21
How should end-to-end encryption of API communications be applied between the microservices containers of the application in a Kubernetes environment?
A. nsure that container pods are deployed with non-root privileges to enforce encryption
B. eploy Istio service mesh and enable mutual TLS for all the container pods
C. odify the application code to instrument encryption of the API communication endpoints
D. et up the network policy on the deployment
View answer
Correct Answer: B
Question #22
An organization manages a large cloud-deployed application that employs a microservices architecture across multiple data centers. Reports have been receivedabout application slowness. The container orchestration logs show that faults have been raised in a variety of containers that caused them to fail and then spin upbrand new instances.Which two actions can improve the design of the application to identify the faults? (Choose two.)
A. Automatically pull out the container that fails the most over a time period
B. Implement a tagging methodology that follows the application execution from service to service
C. Add logging on exception and provide immediate notification
D. Do a write to the datastore every time there is an application failure
E. Implement an SNMP logging system with alerts in case a network link is slow
View answer
Correct Answer: BC
Question #23
An organization manages a large cloud-deployed application that employs a microservices architecture. No notable issues occur with downtime because the services of this application are redundantly deployed over three or more data center regions. However, several times a week reports are received about application slowness. The container orchestration logs show faults in a variety of containers that cause them to fail and then spin up brand new.Which action must be taken to improve the resiliency design of the application while maintaining current scale?
A. pdate the base image of the containers
B. est the execution of the application with another cloud services platform
C. ncrease the number of containers running per service
D. dd consistent ג€try/catch(exception)ג€ clauses to the code
View answer
Correct Answer: D
Question #24
A developer creates an application for a Cisco Catalyst 9000 switch in a Docker container. Which action must be taken to host the application on the switch?
A. Copy the application code to a NETCONF file and upload the file to the switch
B. Connect the switch to Cisco DNA Center and push the application through the platform
C. Use the Cisco IOxClient tool to export the application to a ZIP file and push the file to the switch
D. Export the application as a TAR file and import the file to the switch
E. Reveal Answer
View answer
Correct Answer: D
Question #25
Which two types of storage are supported for app hosting on a Cisco Catalyst 9000 Series Switch? (Choose two.)
A. external USB storage
B. internal SSD
C. CD-ROM
D. SD-card
E. bootflash
View answer
Correct Answer: AB
Question #26
A cloud native project is being worked on in which all source code and dependencies are written in Python, Ruby, and/or JavaScnpt. A change in code triggers anotification to the CI/CD tool to run the CI/CD pipeline.Which step should be omitted from the pipeline?
A. Deploy the code to one or more environments, such as staging and/or production
B. Build one of more containers that package up code and all its dependencies
C. Compile code
D. Run automated tests to validate the code
View answer
Correct Answer: C
Question #27
How should a web application be designed to work on a platform where up to 1000 requests per second can be served?
A. se algorithms like random early detection to deny excessive requests
B. et a per-user limit (for example, 5 requests/minute/user) and deny the requests from the users who have reached the limit
C. nly 1000 user connections are allowed; further connections are denied so that all connected users can be served
D. ll requests are saved and processed one by one so that all users can be served eventually
View answer
Correct Answer: B
Question #28
What is a well-defined concept for GDPR compliance?
A. Data subjects can require that the data controllers erase their personal data
B. Personal data that was collected before the compliance standards were set do not need to be protected
C. Compliance standards apply to organizations that have a physical presence in Europe
D. Records that are relevant to an existing contract agreement can be retained as long as the contract is in effect
View answer
Correct Answer: A
Question #29
An engineer is developing a client/server application for use by a very large number of clients.
A. middleware caching
B. API pagination
C. data compression
D. conditional requests
View answer
Correct Answer: D
Question #30
What is a benefit of continuous testing?
A. It enables silos to be effective
B. It reduces business risks
C. It enables an increase in human intervention
D. It removes the need for performance testing
View answer
Correct Answer: B
Question #31
Which two data encoding techniques are supported by gRPC? (Choose two.)
A. ML
B. SON
C. SCII
D. rotoBuf
E. AML
View answer
Correct Answer: BD
Question #32
A cloud native project is being worked on in which all source code and dependencies are written in Python, Ruby, and/or JavaScipt. A change in code triggers a notification to the CI/CD tool to run the CI/CD pipeline. Which step should be omitted from the pipeline?
A. Deploy the code to one or more environments, such as staging and/or production
B. Build one of more containers that package up code and all its dependencies
C. Compile code
D. Run automated tests to validate the correctness
View answer
Correct Answer: C
Question #33
Refer to the exhibit. A network engineer created a simple Python Flask application but must incorporate a CSRF token. Which code snippet must be added in the blank in the script to manually incorporate the token?
A. access_token" value="{{ csrf_token }}
B. csrf_token" value="{{ csrf_token() }}
C. xss_token" value="{{ csrf_token }}
D. csrf_token" value="{{ csrf_grant() }}
View answer
Correct Answer: B

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:
Contact Us