Reliable Cisco Certified DevNet Professional 300-910 Dumps PDF Aug 01, 2023 Recently Updated Questions
Pass Your Cisco 300-910 Exam with Correct 116 Questions and Answers
NEW QUESTION # 63
Drag and drop the commands from the bottom onto the correct Terraform code in the exhibit to push a network object to a Cisco ASA Firewall device.
Answer:
Explanation:
NEW QUESTION # 64
Which step must be taken to enable centralized logging in a Kubernetes environment?
- A. No steps need to be taken. The master node automatically aggregates logs from all worker nodes and stores them on the specified persistent volume.
- B. Deploy a sidecar node that aggregates logs from the entire cluster.
- C. Create a CustomResourceDefinition in each deployment that specifies the IP or names the log collector.
- D. Create a DaemonSet that deploys a container with a logging agent on every node in the cluster.
Answer: D
Explanation:
Explanation
To enable centralized logging in a Kubernetes environment, you must create a DaemonSet that deploys a container with a logging agent on every node in the cluster. This allows all of the logs from each node to be collected in one place, allowing for easier analysis and management. Reference: Kubernetes Documentation, Logging Architecture.
NEW QUESTION # 65
Fill in the blanks to complete the statement.
When creating multiple containers, in order to allow communication with each other, you must create a_____________ of type_____________.
Answer:
Explanation:
pod, volume
NEW QUESTION # 66 
Refer to the exhibit. What is the user doing with Drone in this automated test?
- A. testing PostgreSQL deployment in an Alpine Linux VM
- B. testing Alpine Linux versus Ubuntu Linux
- C. testing a PostgreSQL DB against multiple architectures
- D. testing only the amd64 architecture
Answer: A
Explanation:
Section: Automating Infrastructure
NEW QUESTION # 67
DRAG DROP
An application is being built to collect and display telemetry streaming data. Drag and drop the elements of this stack from the left onto the correct functions on the right.
Select and Place:
Answer:
Explanation:
Section: Logging, Monitoring, and Metrics
NEW QUESTION # 68
Which step must be taken to enable centralized logging in a Kubernetes environment?
- A. Create a DaemonSet that deploys a container with a logging agent on every node in the cluster.
- B. No steps need to be taken. The master node automatically aggregates logs from all worker nodes and stores them on the specified persistent volume.
- C. Create a CustomResourceDefinition in each deployment that specifies the IP or names the log collector.
- D. Deploy a sidecar node that aggregates logs from the entire cluster.
Answer: D
NEW QUESTION # 69
Which interface is most commonly used to integrate logging, monitoring, and alerting applications into your CI/ CD pipeline?
- A. REST
- B. SSH
- C. AMQP
- D. SNMP
Answer: B
Explanation:
Section: Logging, Monitoring, and Metrics
NEW QUESTION # 70
What are two advantages of using Configuration Management Tools? (Choose two.)
- A. reduction in network changes already performed automatically
- B. reduction in policy violations caused by human errors
- C. reduction in administration costs
- D. reduction in networking team skills
- E. reduction of on-premises networking equipment
Answer: A,C
NEW QUESTION # 71
A developer must create a GitLab CI/CD pipeline with these requirements:
* builds an on-demand test environment
* deploys configurations
* verifies the results
Drag and drop the code from the bottom onto the box where the code is missing to complete the GitLab CI/CD pipeline. Not all options are used.
Answer:
Explanation:
NEW QUESTION # 72
How does eliminating hardcoded or default passwords help to secure an environment?
- A. helps penetration testing team to focus on other issues more efficiently
- B. helps by removing back doors in your environments
- C. helps to manage passwords centrally
- D. helps by enforcing your password in a repository and storing it in a secure vault
Answer: D
NEW QUESTION # 73
A DevOps engineer has built a new container and must open port 8080 for intercontainer communication.
Which command must be added in a Dockerfile to accomplish this goal?
- A. OPEN PORT 8080
- B. EXPOSE 8080
- C. FIREWALL ADD-PORT 8080
- D. PORT 8080
Answer: B
NEW QUESTION # 74
A developer has created a deployment that should launch a pod to run their database service. The pod should launch with a metadata name of "Cisco-DB," and the developer has added it to the "Cisco" namespace in their deployment.
Which Kubernetes command confirms that the service is running and usable?
- A. kubectl -n Cisco get pods | grep "Cisco-DB"
- B. kubectl -n Cisco get service | grep "Cisco-DB"
- C. kubectl get pods | grep "Cisco-DB"
- D. kubectl -n Cisco get services | grep "Cisco-DB"
Answer: A
Explanation:
Explanation
The correct answer is B. kubectl -n Cisco get pods | grep "Cisco-DB". This command allows you to view the pods in the Cisco namespace and filter the list for the pod named "Cisco-DB". This will confirm that the pod is running and usable.
References: Cisco Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS) Study Manual, Chapter 6, Section 6.3: Kubernetes Commands, Page 113.
NEW QUESTION # 75
What is the purpose of using a build tool in software development?
- A. It provides a way to edit source code using a graphical interface.
- B. It complies source code into binaries and executables.
- C. It is a manual process that is followed to build software.
- D. It tracks bugs and incidents in a built application.
Answer: B
NEW QUESTION # 76
Configuration changes to the production network devices are performed by a CI/CD pipeline. The code repository and the CI tool are running on separate servers. Some configuration changes are pushed to the code repository, but the pipeline did not start.
Why did the pipeline fail to start?
- A. The pipeline must be started manually after the code repository is updated.
- B. The CI server was not configured as a Git remote for the repository.
- C. Configuration changes must be sent to the pipeline, which then updates the repository.
- D. The webhook call from the code repository did not reach the CI server.
Answer: D
Explanation:
Explanation
A webhook is basically a callback URL that is triggered when certain events occur, such as a code commit. If the webhook call from the code repository does not reach the CI server, then the pipeline will not start.
According to the Cisco Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS) Study Manual, "A webhook is a web-based feature that enables a remote service to communicate with a local service, usually through a web server. Webhooks are used to trigger an action when a specific event occurs, usually in a remote service or application."
NEW QUESTION # 77
A CI/CD pipeline that builds infrastructure components using Terraform must be designed. A step in the pipeline is needed that checks for errors in any of the .tf files in the working directory. It also checks the existing state of the defined infrastructure.
Which command does the pipeline run to accomplish this goal?
- A. terraform validate
- B. terraform check
- C. terraform plan
- D. terraform fmt
Answer: A
NEW QUESTION # 78
Refer to the exhibit.
What is the user doing with Drone in this automated test?
- A. testing PostgreSQL deployment in an Alpine Linux VM
- B. testing Alpine Linux versus Ubuntu Linux
- C. testing a PostgreSQL DB against multiple architectures
- D. testing only the amd64 architecture
Answer: A
NEW QUESTION # 79
What is the effective way to manage computing costs in a public cloud?
- A. Use dedicated hardware for all instances.
- B. Select the largest instance option available in order to pay for only one instance.
- C. Monitor data transfers to minimize cost.
- D. Make use of elastic services and scale on demand.
Answer: D
Explanation:
Section: Packaging and Delivery of Applications
NEW QUESTION # 80
ConfigMap keys have been mapped to different file names using the volumes.configMap.items field. What is the result if a wrong ConfigMap key is specified?
- A. The volume is created.
- B. The volume is not created.
- C. The volume is created with errors.
- D. The default path is not used.
Answer: D
NEW QUESTION # 81
A three-tier web application must be moved to containers. A webserver is already in place, and the middleware container can talk to a central database server. The hostname of the database server is known, but the name of the middleware server must be provided to the webserver.
In which file should the name of the middleware server be configured?
- A. Docker Swarm
- B. Docker Service discovery daemon
- C. Docker Compose
- D. Dynamic Host Configuration Protocol
Answer: B
NEW QUESTION # 82
Which two practices help make the security of an application a more integral part of the software development lifecycle? (Choose two.)
- A. Use only software modules that are written by the internal team.
- B. Add a step to the CI/CD pipeline that runs a dynamic code analysis tool during the pipeline execution.
- C. Add a step to the CI/CD pipeline that runs a static code analysis tool during the pipeline execution.
- D. Add a step to the CI/CD pipeline to modify the release plan so that updated versions of the software are made available more often.
- E. Ensure that the code repository server has enabled drive encryption and stores the keys on a Trusted Platform Module or Hardware Security Module.
Answer: B,C
Explanation:
Explanation
Adding a step to the CI/CD pipeline that runs a dynamic code analysis tool and a static code analysis tool during the pipeline execution helps make the security of an application a more integral part of the software development lifecycle. Dynamic code analysis tools search for coding errors and vulnerabilities while the application is running, while static code analysis tools scan the source code for potential errors and vulnerabilities. This ensures that any security issues are identified and addressed before the application is deployed. Additionally, using automated tools helps to reduce the amount of manual effort required for security testing and can reduce the risk of security flaws being introduced.
NEW QUESTION # 83
Which method is a safe way to provide a username/password combination to an application running as a service in a Docker container?
- A. as an environment variable in the Dockerfile
- B. Docker secrets
- C. Docker environment variable
- D. encode the value with base64 in a secure DNS CTEXT entry
Answer: B
Explanation:
Explanation
a docker secret is a blob of data, such as a password, SSH private key, SSL certificate, or another piece of data that should not be transmitted over a network or stored unencrypted in a Dockerfile or in your application's source code
NEW QUESTION # 84
A security team is running vulnerability scans against a CI/CD pipeline. The reports show that RDBMS secrets were found hardcoded in Ansible scripts. The RDBMS resides in the internal network but is accessible from a jump server that resides in a public network.
If an attacker gains access to the scripts, what is the risk exposure?
- A. The Automation server is at risk of being compromised.
- B. The Ansible scripts run through encrypted SSH connections.
- C. The entire CI/CD-related infrastructure is at risk.
- D. The internal network is at risk of being compromised.
Answer: D
Explanation:
Explanation
The internal network is at risk of being compromised if an attacker gains access to the Ansible scripts, as the scripts contain hardcoded secrets for the RDBMS which is accessible from a jump server in a public network.
This presents a risk as the secrets can be used to gain access to the RDBMS, and from there, the attacker could potentially gain access to the internal network. Additionally, the entire CI/CD-related infrastructure could be at risk if the attacker is able to gain access to the RDBMS, as they could potentially manipulate the data or scripts in order to cause disruption or damage.
NEW QUESTION # 85 
Refer to the exhibit. The exhibit shows the output of an Ansible task that prints the contents of the show_ip_int_brief variable that was registered in a different task in the playbook.
Which expression is used to print the output of the command without its header row?
- A. show_ip_int_brief['stdout_lines']
- B. show_ip_int_brief['stdout_lines'][1:]
- C. show_ip_int_brief['stdout_lines'][0][1:]
- D. show_ip_int_brief['stdout_lines'][0]
Answer: B
Explanation:
Section: Automating Infrastructure
Explanation
NEW QUESTION # 86
......
Latest 2023 Realistic Verified 300-910 Dumps: https://passcertification.preppdf.com/Cisco/300-910-prepaway-exam-dumps.html