Free Practice Questions for the Cisco Certified DevNet Professional 350-901 Exam (2026 Updated)
At Marks4sure, we are dedicated to providing IT professionals with the most accurate and reliable preparation materials for the Cisco 350-901 exam. To support your certification journey, we have made a selection of our premium 2026 Cisco Certified DevNet Professional practice questions and answers available completely free. You can take this practice test as many times as you need. Every question includes a detailed, expertly verified explanation to ensure you fully grasp the core security concepts before test day.
Drag and drop the components from the left into the order on the right to create the flow of the three-legged OAuth2.

Refer to the exhibit.

Drag and drop the steps from the left into the order of operation on the right for a successful OAuth2 three-legged authorization code grant flow,
Refer to the exhibit.

Drag and drop the code from the bottom onto the box where the code is missing to complete the API request. An engineer is using this API request to implement Chat-Ops to generate notifications m a Webex space by using webhooks. Not all options are used.

Which outcome results from integrating Al-based analysis of network scripts in the lifecycle of network automation using Al-assisted code approaches?
Refer to the exhibit.

Which parameter is missing from the JSON response to confirm the API version that is
used?
A developer is designing a modem, distributed microservice enterprise application. The application will be integrating with other systems and focus on a large deployment, so control of API calls is necessary. What is the best practice to reduce application response latency and protect the application from excessive use?
A web application is susceptible to cross-site scripting. Which two methods allow this issue to be mitigated? (Choose two.)
Refer to the exhibit.

A company has extended networking from the data center to the cloud through Transit VPC.
Which two statements describe the benefits of this approach? (Choose two.)
A developer creates an application for a Cisco Catalyst 9000 switch in a Docker container. Which action must be taken to host the application on the switch?
On which system must the messaging standards be defined to allow communication between all the components for a custom dashboard?)
Drag and drop the steps from the left into the order on the right to create the workflow to retrieve the gateway information from a set of Cisco IOS devices. Not all options are used.

A company is starting a machine-learning project to analyze employee information and enforce social distancing guidelines. The data that the company wants to leverage includes these data points:
• access badge logs
• security camera metadata
• WebEx Teams messages
• email attachments
• phone GPS coordinates
Which type of database must be used for this application?
Refer to the exhibit.

The cisco_devnet Docker swarm service runs across five replicas The development team tags and imports a new image named devnet ' test 1 1 and requests that the image be upgraded on each container There must be no service outages during the upgrade process Which two design approaches must be used? (Choose two.)
Which kind of API that is used with Cisco DNA Center provisions SSIDs, QoS policies, and update software versions on switches?
Which load balancing algorithm balances load based on the active sessions of a node?
A company must adopt a configuration management solution for its multi-cloud microservices architecture. The solution has these requirements:
* Hybrid cloud deployment
* Automated compliance and security configurations
* Dynamic infrastructure scaling
* Zero-downtime updates
* Immutable infrastructure principles
* Advanced configuration monitoring
Which configuration management solution should be implemented?
Drag and drop the code from the bottom onto the box where the code is missing to configure a router that runs Cisco IOS XE by using RESTCONF. The API call is made to the management URL of the IOS XE device and on a registered port number. Errors that are caught during HTTP operation are registered. Not all options are used.

Refer to the exhibit.

Which action will complete the workflow that represents how an API call sends multiple messages?
Refer to the exhibit.

What is the missing step in deploying a Docker container to lOx?
User report that they can no longer process transactions with the online ordering application, and the logging dashboard is displaying these messages.
Fri Jan 10 19:37:31.123 EST 2020 [FRONTEND] INFO: Incoming request to add item to cart from user 45834534858
Fri Jan 10 19:37:31 247 EST 2020 [BACKEND] INFO: Attempting to add item to cart
Fri Jan 10 19:37:31 250 EST 2020 [BACKEND] ERROR: Failed to add item: MYSQLDB ERROR: Connection refused
What is causing the problem seen in these log messages?
Which two design considerations should be considered when building a Cisco Meraki dashboard out of available APIs? (Choose two,)
Refer to the exhibit.

A network engineer must integrate error handling tor time-outs on network devices using the REST interface. Which line of code needs to be placed on the snippet where the code is missing to accomplish this task?
How does the use of release packaging allow dependencies to be effectively managed during deployments?
Which impact does dynamically adjusting scripts based on AI feedback have on the risk profile when adopting Al-assisted development in automated network workflows?
In the three-legged OAuth2 process, after the authorization server presents a form to the resource owner to grant access, what is the next step?
A developer releases a new application for network automation of Cisco devices deployed in a local data center. The application utilizes complex design patterns such as microservices that host multiple third-party libraries and programming languages. The development must be simplified by implementing an observability- driven velopment lifecycle. Which two considerations must be taken to meet the requirements? (Choose two.)
A developer must package an application for Kubernetes to integrate into a prebuilt CD environment. The application utilizes a Docker image from Cisco DevNet public repository and is accessible from a specific port of the container. Drag and drop the code from the bottom onto the box where the code is missing in the Kubernetes YAML configuration file. Not all options are used.

Refer to the exhibit.

A network automation solution is being constructed to integrate inventory data using a workflow orchestrator for orchestration and a REST API service as the source of the data. The infrastructure team organized variable files for device management. When building the integration workflow, which action must be taken to ensure that the orchestration layer can reliably access the inventory data from the designated system?
Which authorization steps are required to obtain an access token according to the OAuth2 authorization code grant flow?

Refer to the exhibit. As part of a new network service rollout in the branch office, the network team is automating the configuration of network devices to ensure fast and consistent deployment. The team must use a RESTCONF-based Python script to the team remotely update the WAN uplink interface on the branch router with the appropriate settings for immediate connectivity The Python script must authenticate with the router, send a PATCH request using the ietf-interfaces YANG model to configure GigabitEthernetl. and confirm a successful update. Drag and drop the code snippets from the bottom onto the boxes in the code to construct the Python script Not all options are used

Refer to the exhibit.

Which two functions are performed by the load balancer when it handles traffic originating from the Internet destined to an application hosted on the file server farm? (Choose two.)
Refer to the exhibit.

Which AP! call does an engineer use to delete the FQDN object?
Refer to the exhibit.

Drag and drop the correct parts of the Dockerfile from the left onto the item numbers on the right that match the missing sections in the exhibit to complete the Dockerfile to successfully build and deploy a container running a Python application. Not all parts of the Dockerfile are used.

DRAG DROP


Refer to the exhibit. A system administrator has installed a Linux-based alarm system in their home that can execute a Bash shell script when an intruder is detected. Drag and drop the code snippets from the left onto the item numbers on the right that match the missing sections in the exhibit to create a chat-ops script that will notify of alarms via the Webex Teams REST API. Not all code snippets are used.

A developer is containerizing an application using Docker. A local Docker alpine image has been created, and it has the image ID ' b9c2d50f0b6y74998 ' with the tag ' dev ' . The developer must make a running container based on the tagged image, with the container port 80 bound to port 8080 on the host. Which command must be used?

Refer to the exhibit. The deployment pipeline executes baseline input verification and then applies advanced module logic scans to validate automation changes throughout the codebase The code and related configuration files were committed after a recent feature implementation The process includes automated environment configuration and package installation before each pipeline run After the most recent changeset. the pipeline fails and halts prior to the modulo build completion Logistics such as runner availability and accessible artifacts have been independently confirmed What caused the pipeline problem?
During operational readiness checks, the management team requires device onboarding to be implemented for smooth workflow progression. Automated change validation with pyATS information gatherer has been introduced to help maintain accurate infrastructure records. Ongoing change detection and streamlined troubleshooting are vital to keeping environments reliable. All checks must be performed as part of the regular pipeline. How can the process be implemented practically?

Refer to the exhibit. A network automation job was scheduled to run during the standard maintenance window on device R1. The job was configured to use connection method NETCONF, and execution was triggered from the orchestrator server During the maintenance window, the system logs indicate that the workflow could not reach its intended target. Further investigation into monitoring alerts reveals persistent connection failures for the duration of the job window. Operations reported that other devices were reachable from the server The orchestration logs do not show issues with job scheduling or agent workflows What is the root network automation issue?
Drag and drop the git commands from the left into the correct order on the right to create a feature branch from the master and then incorporate that feature branch into the master.

Refer to the exhibit.

A Python script has these requirements
• Retrieve a list of Bluetooth clients seen by the access pants on a network.
• Print the content of the response
• Retrieve the next page only if it is available in the response headers
What must be added where the code is missing to get the remaining pages by using the next link from the link response header of the last request?
A)

B)

C)

D)

On a Cisco Catalyst 9300 Series Switch, the guest shell is being used to create a service within a container. Which change is needed to allow the service to have external access?
Refer to the exhibit , The command docker build -tag=friendlyhello . is run to build a docker image from the given Dockerfile,
requirements,txt, and app.py, Then the command docker run -p 4000:80 friendlyhello is executed to run the application. Which URL is entered in the web browser to see the content served by the application?
An application has initiated an OAuth authorization code grant flow to get access to an API resource on behalf of an end user.
Which two parameters are specified in the HTTP request coming back to the application as the end user grants access? (Choose two.)

Refer to the exhibit. Drag and drop the code snippets from the bottom onto the blanks in the code to construct a Python script that creates a new network object in FDM. Not all options are used.

A developer in a learn of distributed authors is working on code in an isolated Git branch named ' update4a2f5464771 The developer attempts to merge the new code with a branch named ’dvcapp2a3f1564733 ' however the merge operation encounters a conflict error during the process. Which Git command must the developer use to exit from the merge process and return the branch to the previous state?
A developer has created a local Docker alpine image that has the image ID ' dockapp432195596ffr ' and tagged as ‘new’. Which command creates a running container based on the tagged image, with the container port 80 bound to port 8080 on the host?
Refer to the exhibit.

An architect wrote an application to collect device information from the Cisco Meraki Dashboard API. Every time a network change occurs the application collects information and records new endpoint MAC addresses. The application stopped working after the locations and network equipment of a competitor were acquired. Which application approach must be applied to reduce latency and rate limiting?
A network automation engineer is building an Ansible playbook to deploy interface configurations for high-availability uplinks on designated switches. The configuration must set all required parameters for Port-channel 10 without missing any steps. Drag and drop the code snippets from the bottom onto the boxes in the code to construct the Ansible playbook. Not all options are used.

Refer to the exhibit.

Two IPv4 addresses must be set on interface Gi0/1. The model shows an ipv4 container with an address list keyed by ip with prefix-length leaf. The engineer must produce valid YAML under the correct containers. Drag and drop the code snippets from the bottom onto the boxes in the code to construct the artifact. Not all options are used.

A developer is creating a Python Flask solution to leverage the Cisco Meraki Location API. Drag and drop the code snippets from the bottom onto the blanks in the Python script to manage incoming location data. Not all options are used.

An application has these characteristics
• provide one service or function
• distributed database
• API gateway
• central repository for code
• configuration database
• uses session management
Which two design approaches contribute to the scalability of the application? (Choose two.)
A developer is creating a Python script to analyze errors during REST API call operations. The script will be used with Cisco solution and devices. Drag and drop the code from the bottom to the box where the code is missing to implement control flow for handling unrecoverable REST API calls. Not all options are used.

Refer to the exhibit.

The cURL POST request creates an OAuth access token for authentication with FDM API requests. What is the purpose of the file “@token_data” that cURL is handling?
There is a requirement to securely store unique usernames and passwords. Given a valid username, it is also required to validate that the password provided is correct. Which action accomplishes this task?
Which scenario is an example of the pseudonymization of sensitive data that meets GDPR requirements?
Refer to the exhibit.

A network engineer is configuring automation using a real-time audit controller and plans to integrate information stored through an API-based resource catalog. The goal is to ensure that the chosen solution pulls device records directly into the automation workflow. The current framework provides flexible options for connecting with various data stores and external resources. Which integration step enables collection of accurate device attributes for orchestration?
Drag and drop the code snippets from the bottom onto the blanks in the Python script to retrieve a list of all the Cisco Webex rooms using pagination and the Webex API. Not all options are used.

Click on the GET Resource button above to view resources that will help with this question.



An engineer is managing a DC with 6000 Cisco UCS servers installed and running. The engineer has been asked to identify all resources where the model is in the UCSB family and the available memory is less than or equal to 5 GB.
Which REST API call accomplishes this task?
When end-to-end encryption is implemented, which area is most vulnerable to exploitation?
An engineer is developing a client/server application for use by a very large number of clients. The engineer must optimize the application response time and lower the required network bandwidth when clients access the server. The engineer wants the server responses to be based on the resource version fetched by the clients. Which HTTP technique must be used?
Multiple business units are collaborating to automate device provisioning across distributed branches. The solution must accommodate different levels of expertise with template-driven configuration and orchestration features. The solution also must work with nonstandard devices to ensure business process consistency. Which approach meets the requirements?
Which configuration stop must be performed on a Cisco IOS XE device to present collected data in Cisco DNA Center?

Refer to the exhibit A network engineer must use a RESTCONF-based Python script to deploy OSPF routing on a Cisco IOS XE device. The engineer must complete a Python script that sends a request to update the device configuration with OSPF process ID 1, router ID 1.1.1.1, and a network statement for 10 0.0 0/24 in area 0 The script leverages the Cisco IOS XE native YANG model, specifically the Cisco-IOS-XE- native native/router/ospf container, to structure the OSPF configuration payload Drag and drop the code snippets from the bottom onto the boxes in the code to construct the Python script Not all options are used

A developer must deploy a containerized application foe network device inventory management. The developer sets up a Kubernetes duster on two separate hypervisors. The SLA is not currently meeting a specified maximum value for network latencyjitter CPU/memory and disk I/O are functioning property. Which two design approaches resolve the issue ' ' (Choose two.)
An engineer must add a post-validation stage that performs an HTTP smoke test of the freshly deployed API. The engineer must declare a post-validation stage, run curl against a health endpoint, and publish the response body as an artifact. Drag and drop the code snippets from the bottom onto the boxes in the code to construct the artifact. Not all options are used.


Refer to me exhibit The Python code manages a Cisco CSR 1000V router Which code snippet must be placed in the blank m the code to update the current configuration of the targeted resource?
A)

B)

C)

D)

Given an application that implements a basic search function as Well as a video upload function , which two load-balancing approaches
optimize the application ' s user experience? (Choose two.)
Click on the resource lab in the top left comer to view resources to help with this question An engineer is managing a data center with 6000 Cisco UCS servers installed and running The engineer is asked to identify all resources where the model is in the UCSB family and the available memory is less than or equal to 5 GB Drag and drop the code from the bottom onto the blanks in the code snippet to construct a REST API call to accomplish this task Not all options are used.

Which two strategies are used to protect personally identifiable information? (Choose two.)




















