WorksheetsVariant 0 — Worksheet Questions
Total questions: 60
Worksheet time: 30mins
What is the current Cisco product that allows you to create virtualized network devices through an API for use in QA and testing?
VIRL
NSO
CML
pyATS
ITSM
ACI is integrated with an SD-WAN controller and provides information on how to prioritize traffic to or from a particular application. Which pair of domains is involved?
enterprise and data center
data center and security
data center and service provider
service provider and enterprise
none of them
Which method is used to automate a multidomain network?
CLI
GUI
console
API
A variable of the list data type that is named devices has the following value: [{"hostname":"csr1kv1"}]. Which Python command will print the value of the "hostname" key?
print(devices["hostname"])
print(devices[0]["hostname"])
print(devices(0))
print(devices[0][hostname])
print(devices[hostname])
Which option can be used to list all available methods for any supported Python data type and learn how to use a given method?
len()
all()
print()
show()
help()
What is a reason to use XML namespaces?
to describe the element
to combine elements by their purpose
to easily identify a desired element
to avoid element name conflicts
all of them
What is the name of the Python object that represents XML data?
xml
xml.etree.ElementTree
xml.etree
xml.etree.ElementTree.parse()
xml.etree.parse()
Which feature of a RESTful API ensures that each HTTP request received by the server is independent of previous requests?
Scalability
Cacheable
Stateless
Simple
Private
RESTCONF is based on which data model?
Next-Gen
YANG
REST
HTTP
HTTPS
Which HTTP error code should show up when the number of API calls have been exceeded?
404
200
429
501
203
Which word is prepended to the basic authentication in the headers?
Basic
None
Bearer
Simple
Header
Which of the following modules is used to send arbitrary operational commands to networking devices?
ios_command
ios_cmd
ios_facts
debug_command
command
Which statement best describes Jinja2?
Jinja2 is a programming language that is used with Python.
Jinja2 is a templating language that can be used to simplify the generation of a text file when using Python.
Jinja2 is the only templating language that works with networking devices.
Jinja2 is a templating language that is purpose-built for templating network configurations.
Which parameter is required when using the template module?
template
source
destination
dest
temp
Which process represents the SDLC?
Design, review, and copy software products
Plan, design, develop, and test high-quality software products and applications
Assess, implement, and test software products
Review, test, and put into production a software product
None of them
Which option does Lean seek to eliminate as its main objective?
error
people
main
waste
scope creep
Which statement describes a Git remote repository?
A remote repository is where the files of the project reside, and it is also from where all other local copies are pulled.
A remote repository is where snapshots, or commits, are stored on the local machine of each person.
A remote repository is where all the changes that are performed are placed.
A remote repository is where the files are stored as they are modified.
A remote repository is where the files can’t be modifies
Which of the following tools can isolate an operating system and contain all the necessary dependencies used as part of a reproducible environment?
Vagrant
Docker
Pipenv
Qemu
Cisco
Which model includes operational and configuration data in a single model?
OpenConfig output
native output
IETF output
CLI output
Config output
What is the default port number for NETCONF?
TCP port 380
UDP port 380
UDP port 830
TCP port 22
TCP port 830
True or False. Most cyberattacks today are perpetrated by internal threat actors, such as malicious employees engaging in corporate espionage.
True
False
Which cybersecurity regulation strengthens data protection for European Union - EU - residents and addresses the export of personal data outside the EU?
Canada Personal Information Protection and Electronic Documents Act - PIPEDA
General Data Protection Regulation - GDPR
Payment Card Industry Data Security Standard - PCI DSS
North American Electric Reliability Corporation - NERC
Critical Infrastructure Protection - CIP
True or False. The Cyber-Attack Lifecycle framework is a five-step process that an attacker can implement in order to attack a network.
True
False
Which is not a Zero Trust design principle?
Ensure that all resources are accessed securely, regardless of location
Adopt a least privilege strategy and strictly enforce access control
Allow internal users to access network services through remote access
Inspect and log all traffic
None of them
Which Secure the Cloud technology functions as a multimode cloud access security broker (CASB), offering inline and API-based protection working together to minimize the range of cloud risks that can lead to breaches?
Prisma SaaS
Prisma Access
Prisma SASE
Prisma Cloud
LLM input and data quality assessment can be hindered by a lack of input ____________.
validation
diversity
sampling
bias
hallucination
Which network device is essentially an intelligent hub that uses physical or logical addresses to forward data packets to devices on a network?
Switch
Router
Firewall
Server
Hub
What is another term for a logical address?
IP Address
Physical Address
MAC Address
Burned-In Address
Default gateway
Which layer of the OSI model does Project 802 divide into two sublayers?
Physical
Data Link
Network
Session
Transport
Select True or False - Zero Trust is intended to remedy the deficiencies of perimeter-centric strategies.
True
False
An effective SASE solution needs to service the following requirements - Select the best answer.
All of them
Diversity - Carrier Agnostic
Scalability
Mobility
None of them
Which SASE tenet should enable complete visibility and control over all traffic, regardless of where a user may be located, to ensure the secure use of cloud-based apps and other web services?
Zero Trust Network Access - ZTNA
Cloud Access Security Broker - CASB
Secure Web Gateway - SWG
Autonomous Digital Experience Monitoring – ADEM
Software Defined - Wide Area Network - SD-WAN
A hypervisor allows multiple, virtual (“guest”):operating systems to run concurrently on a single physical host computer.
True
False
The Cloud Native Computing Foundation (CNCF) Kubernetes project defines a container security model for Kubernetes in the context of cloud native security. This model is referred to as “the 4 C’s of Cloud Native security”.
True
False
An added benefit of using virtual firewalls for east-west protection is the unprecedented traffic and threat visibility that the virtualized security device can now provide.
True
False
Prisma SaaS is an inline service, so it doesn’t impact latency, bandwidth, or end-user experience.
True
False
Which Cortex Cloud Pillar Enforce machine learning-based runtime protection to protect applications and workloads in real time?
Network Protection
Visibility, Governance, and Compliance
Computer Security
Identity Security
Access and Protection
Which key element is crucial for both SecOps and DevSecOps to function effectively?
Automation of security tasks and processes
The exclusive use of open-source security tools
Daily manual code reviews by the CEO
A strict separation of duties with no collaboration between teams
Developing custom programming languages for security tasks
SecOps content engineering is the function that builds alerting profiles which identify the alerts that will be forwarded for investigation.
True
False
Cortex Data Lake unifies case management, automation, real-time collaboration, and native threat intel management in the industry’s first extended security orchestration, automation, and response – SOAR - offering.
True
False
Which tool will Cymbal Bank use to enforce authentication and authorization for services deployed to Google Cloud?
Google Cloud Armor
Application Load Balancer
Firewall rules
Identity-Aware proxy
Google private access
What feature will allow Cymbal Bank to delete or change the storage class of objects in Cloud Storage buckets?
Retention policies
Rotation periods
Lifecycle management rules
Object versioning
Google Cloud Armor
The loan application from Cymbal Bank’s lending department collects credit reports that contain credit payment information from customers. According to bank policy, the PDF reports are stored for six months in Cloud Storage, and access logs for the reports are stored for three years. You need to configure a cost-effective storage solution for the access logs. What should you do?
Set up a logging export bucket in Cloud Storage to collect data from the Security Command Center. Configure object lifecycle management rules to delete logs after three years.
Set up a logging export dataset in BigQuery to collect data from Cloud Logging and the Security Command Center. Create table expiry rules to delete logs after three years.
Set up a logging export bucket in Cloud Storage to collect data from Cloud Audit Logs. Configure object lifecycle management rules to delete logs after three years.
Set up a logging export dataset in BigQuery to collect data from Cloud Logging and Cloud Monitoring. Create table expiry rules to delete logs after three years.
All of them
How will Cymbal Bank be able to determine who performed a particular administrative action and when?
Audit logs
VPC service controls
Cloud Monitoring
VPC flow logs
Cloud logs
You are a cloud engineer at Cymbal Bank. You need to share the auditing and compliance standards with your CTO that cover controls over financial reporting and both public and private controls over security, availability, and confidentiality. Which compliance standard covers this?
PCI-DSS
GDPR
SOX
FIPs 140-2
GCA
Cymbal Bank has compliance requirements to ensure certain data is stored, processed, and never transferred or used outside of Europe. Which Google Cloud feature can help them achieve this?
Sensitive Data Protection
Audit logs
Organization policy constraints
VPC service controls
Cloud Monitoring
What type of cloud computing service lets you bind your application code to libraries that give access to the infrastructure your application needs?
Hybrid cloud
Virtualized data centers
Platform as a service
Infrastructure as a service
Software as a service
Which of these values is globally unique, permanent, and unchangeable, but can be modified by the customer during creation?
The project number
The project's billing credit-card number
The project name
The project ID
The project address
For which of these interconnect options is a Service Level Agreement available?
Carrier Peering
Direct Peering
Standard Network Tier
Dedicated Interconnect
Google Cloud service
Which relational database service can scale to higher database sizes?
Firestore
Cloud SQL
Bigtable
Spanner
Google Cloud
Which scenario is best suited for using Cloud Run instead of Cloud Run functions?
Sending an email notification whenever a new document is added to a specific folder in Cloud Storage.
Generating thumbnails for images uploaded to a Cloud Storage bucket.
Hosting a dynamic web application that allows users to upload and share photos.
Resizing images on demand when requested by a user through a web interface.
Performing batch processing of large datasets for data analytic
How can you avoid hallucinations when using a large language model?
Train the model to operate with very few constraints.
Train the model on a clean, curated dataset.
Train the LLM on a smaller dataset.
Do not add any context to your prompts.
Provide clear, precise, and relevant context in your prompts.
You want to lower cloud networking cost and have no problem leveraging the public internet for cross-region traffic. Which network service tier is best for you?
Premium tier
Standard tier
Pro version
Prime tier
Basic tier
Which of the following approaches to multi-project networking uses a centralized network administration model?
VPC Network Peering
Shared VPC
Cloud VPN
Cloud VPN and Shared VPC
Private VPC
You must create a VM that has an IPv6 address. How do you do it?
Create an IPv6-only subnet, and create the VM with an IPv6 address.
Create a dual-stack subnet, and create the VM with an IPv6 address.
Create a single-stack network, and create the VM with an IPv6 address.
Create a dual-stack network, and create the VM with an IPv6 address.
Create an IPv4-only subnet, and create the VM with an IPv6 address.
Private services access automatically configures which Google Cloud product to implement communication between the producer and consumer VPC networks?
Private Google Access
Cloud NAT
Shared VPC
VPC Network Peering
Cloud Interconnect
You are designing a Google Cloud network for a large financial services company with strict security requirements. The network needs to isolate sensitive customer data from other resources and limit communication between specific network segments. Which of the following network topologies would be most suitable for this scenario?
Hub-and-spoke
Mesh
Gated ingress and egress
Mirrored
Star
Which IAM role contains permissions to create, modify, and delete networking resources, except for firewall rules and SSL certificates?
Network viewer
Security administrator
Network administrator
Security viewer
Network engineer
When you use the internal IP address of the forwarding rule to specify an internal Network Load Balancer next hop, the load balancer can only be:
In the same VPC network as the next hop route.
In the same subnet as the next hop route.
In the same subnet as the next hop route or a shared VPC network.
In the same VPC network as the next hop route or in a peered VPC network.
In the same region as the next hop route
Which of the following statements is TRUE for the use of Cloud Identity?
Your organization must use Google Workspace services in order to use Cloud Identity.
Cloud Identity can work with any domain name that is able to receive email.
You cannot use both Cloud Identity and Google Workspace services to manage your users across your domain.
A Google Workspace or Cloud Identity account can be associated with more than one Organization.
Cloud Identity requires a minimum of 10 users to set up.
