350-901 Exam Questions and Answers | Exam-Dumps (Page: 13)

QUESTION: 60

Which security approach should be used for developing a REST API?

Add an API key to each URL string.
Use custom security relevant HTTP response codes.
Utilize CORS headers.
Utilize TLS for end-to-end encryption.

Answer(s): D

Refer to the exhibit. The application follows a containerized microservices architecture that has one container per microservice. The microservices communicate with each other by using REST APIs. The double-headed arrows in the diagram display chains of synchronous HTTP calls needed for a single user request.

Which action ensures the resilience of the application in the scope of a single user request?

Implement retries with exponential backoff during HTTP API calls.
Set up multiple instances of each microservice in active/active mode by using the Orchestrator.
Redesign the application to be separated into these three layers: Presentation, API, and Data.
Create two virtual machines that each host an instance of the application and set up a cluster.

Answer(s): A

Reveal Solution Next Question

QUESTION: 62

DRAG DROP (Drag and Drop is not supported)
Drag and drop the steps on the left into the order on the right for an end-user to access an OAuth2 protectedresource using the 'Authorization Code Grant' flow.

Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reveal Solution Next Question

QUESTION: 63

In the three-legged OAuth2 authorization workflow, which entity grants access to a protected resource?

resource owner
client
resource server
authorization server

Answer(s): A

Reference:

https://developer.orange.com/tech_guide/3-legged-oauth/

Reveal Solution Next Question

QUESTION: 64

What are two steps in the OAuth2 protocol flow? (Choose two.)

The user is authenticated by the authorization server and granted an access token.
The user’s original credentials are validated by the resource server and authorization is granted.
The user indirectly requests authorization through the authorization server.
The user requests an access token by authentication and authorization grant presentation.
The user requests the protected resource from the resource server using the original credentials.

Answer(s): C,E

Reference:

https://www.digitalocean.com/community/tutorials/an-introduction-to-oauth-2

Reveal Solution Next Question

Cisco 350-901 Exam (page: 13)
Cisco Developing Applications using Core Platforms and APIs (DEVCOR)
Updated on: 15-Feb-2026

QUESTION: 60

QUESTION: 61

QUESTION: 62

Explanation:

QUESTION: 63

Reference:

QUESTION: 64

Reference:

Cisco 350-901 Exam (page: 13) Cisco Developing Applications using Core Platforms and APIs (DEVCOR) Updated on: 15-Feb-2026

QUESTION: 60

QUESTION: 61

QUESTION: 62

Explanation:

QUESTION: 63

Reference:

QUESTION: 64

Reference:

Cisco 350-901 Exam (page: 13)
Cisco Developing Applications using Core Platforms and APIs (DEVCOR)
Updated on: 15-Feb-2026