300-910 Implementing DevOps Solutions and Practices using Cisco Platforms (300-910 DEVOPS) Exam

 

Exam Description:
Implementing DevOps Solutions and Practices using Cisco Platforms v1.0 (DEVOPS 300-910) is a 90-minute exam associated with the DevNet Professional Certification. This exam tests a candidate's knowledge of DevOps practices as it pertains to deployment automation that enables automated configuration, management, and scalability of cloud microservices and infrastructure processes on Cisco platforms. The course, Implementing DevOps Solutions and Practices using Cisco Platforms, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

20% 1.0 CI/CD Pipeline
1.1 Describe characteristics and concepts of build /deploy tools such as Jenkins, Drone, or Travis CI
1.2 Identify the sequence, components, and integrations to implement a CI/CD pipeline for a given scenario
1.3 Troubleshoot issues with a CI/CD pipeline such as code-based failures, pipeline issues, and tool incompatibility
1.4 Identify tests to integrate into a CI/CD pipeline for a given scenario
1.5 Identify release deployment strategy (canary, rollbacks, and blue/green) for a given scenario
1.6 Diagnose code dependency management issues including API, tool chain, and libraries

15% 2.0 Packaging and Delivery of Applications
2.1 Identify the steps to containerize an application
2.2 Identify steps to deploy multiple microservice applications
2.3 Evaluate microservices and container architecture diagrams based on technical and business requirements (security, performance, stability, and cost)
2.4 Identify safe handling practices for configuration items, application parameters, and secrets
2.5 Construct a Docker file to address application specifications
2.6 Describe the usage of golden images to deploy applications

20% 3.0 Automating Infrastructure
3.1 Describe how to integrate DevOps practices into an existing organization structure
3.2 Describe the use of configuration management tools to automate infrastructure services such as Ansible, Puppet, Terraform, and Chef
3.3 Construct an Ansible playbook to automate an application deployment of infrastructure services
3.4 Construct a Terraform configuration to automate an application deployment of infrastructure services
3.5 Describe the practice and benefits of Infrastructure as Code
3.6 Design a pre-check validation of the network state in a CI/CD pipeline for a given scenario
3.7 Design a pre-check validation of the application infrastructure in a CI/CD pipeline for a given scenario
3.8 Describe the concepts of extending DevOps practices to the network for NetDevOps
3.9 Identify the requirements such as memory, disk I/O, network, and CPU needed to scale the application or service

15% 4.0 Cloud and Multicloud
4.1 Describe the concepts and objects of Kubernetes
4.2 Deploy applications to a Kubernetes cluster
4.3 Utilize objects of Kubernetes to build a deployment to meet requirements
4.4 Interpret the pipeline for continuous delivery of a Drone configuration file
4.5 Validate the success of an application deployment on Kubernetes
4.6 Describe method and considerations to deploy an application to multiple environments such as multiple cloud providers, high availability configurations, disaster recovery configurations, and testing cloud portability
4.7 Describe the process of tracking and projecting costs when consuming public cloud
4.8 Describe benefits of infrastructure as code for repeatable public cloud consumption
4.9 Compare cloud services strategies (build versus buy)

20% 5.0 Logging, Monitoring, and Metrics
5.1 Identify the elements of log and metric systems to facilitate application troubleshooting such as performance issues and streaming telemetry logs
5.2 Implement a log collection and reporting system for applications
5.2.a aggregate logs from multiple related applications
5.2.b search capabilities
5.2.c reporting capabilities
5.3 Troubleshoot a distributed application using AppDyanmics with Application Performance Monitoring
5.4 Describe the principles of chaos engineering
5.5 Construct Python scripts that use APIs to accomplish these tasks
5.5.a build a monitoring dashboard
5.5.b notify Webex Teams space
5.5.c responding to alerts and outages
5.5.d creating notifications
5.5.e health check monitoring
5.5.f opening and closing incidents
5.6 Identify additional application requirements to provide visibility into application health and performance
5.7 Describe Kubernetes capabilities related to logging, monitoring, and metrics
5.8 Describe the integration of logging, monitoring and alerting in a CI/CD pipeline design
2019 Cisco Systems, Inc. This document is Cisco Public. Page 3

10% 6.0 Security
6.1 Identify methods to secure an application and infrastructure during production and testing in a CI/CD pipeline
6.2 Identify methods to implement a secure software development life cycle

QUESTION 1
A DevOps engineer must validate the working state of the network before implementing a CI/CD pipeline model. Which configuration management tool is designed to accomplish this?

A. Jenkins
B. Genie CLI
C. Travis CI
D. Python YAML data libraries

Correct Answer: A

QUESTION 2
Which two practices help make the security of an application a more integral part of the software development lifecycle? (Choose two.)

A. Add a step to the CI/CD pipeline that runs a dynamic code analysis tool during the pipeline execution.
B. Add a step to the CI/CD pipeline that runs a static code analysis tool during the pipeline execution.
C. Use only software modules that are written by the internal team.
D. Add a step to the CI/CD pipeline to modify the release plan so that updated versions of the software are made available more often.
E. Ensure that the code repository server has enabled drive encryption and stores the keys on a Trusted Platform Module or Hardware Security Module.

Correct Answer: AE

QUESTION 3
A CI/CD pipeline that builds infrastructure components using Terraform must be designed.
A step in the pipeline is needed that checks for errors in any of the .tf files in the working directory.
It also checks the existing state of the defined infrastructure.
Which command does the pipeline run to accomplish this goal?

A. terraform plan
B. terraform check
C. terraform fmt
D. terraform validate

Correct Answer: D
 

Actualkey Cisco 300-910 Exam pdf, Certkingdom Cisco 300-910 PDF

Best Cisco 300-910 Certification, Cisco 300-910 Training at certkingdom.com

JN0-635 Security, Professional (JNCIP-SEC) Exam

 

Exam Details
JNCIP-SEC exam topics are based on the content of the recommended instructor-led training courses, as well as the additional resources.

Exam code: JN0-635
Written exam
Administered by Pearson VUE
Exam length: 120 minutes
Exam type: 65 multiple choice questions
Pass/fail status is available immediately

Exam Objectives
This list provides a general view of the skill set required to successfully complete the specified certification exam.

Describe the concepts, operation, or functionality of firewall filters and ACLs
Selective packet processing
Troubleshooting with firewall filters
Filter-based forwarding

Given a scenario, demonstrate how to configure, troubleshoot, or monitor firewall filters

Given a scenario, demonstrate how to troubleshoot or monitor security policies or security zones
Tools
Logging and tracing
Other outputs

Describe the concepts, operation, or functionality of Juniper ATP
Collectors
Custom rules
Mitigation

Given a scenario, demonstrate how to configure or monitor Juniper ATP

Describe the concepts, operation, or functionality of edge security features
Hardware support
SecIntel
IPS
Corero DDoS mitigation
ATP

Describe the concepts or operation of security compliance
RBAC
Security Director
AAA and SAML integration

Describe the concepts, operation, or functionality of threat mitigation
Malware identification or mitigation
Malicious lateral traffic identification or mitigation
Zero trust micro segmentation

Given a scenario, demonstrate how to configure or monitor threat mitigation

Describe the concepts, operation, or functionality of the logical systems
Administrative roles
Security profiles
LSYS communication

Describe the concepts, operation, or functionality of the tenant systems
Master and tenant admins
TSYS capacity

Describe the concepts, operation, or functionality of Layer 2 security
Transparent mode
Mixed mode
Secure wire
MACsec

Given a scenario, demonstrate how to configure or monitor Layer 2 security

Describe the concepts, operation, or functionality of advanced NAT functionality
Persistent NAT
DNS doctoring
IPv6 NAT

Given a scenario, demonstrate how to configure, troubleshoot, or monitor advanced NAT scenarios

Describe the concepts, operation, or functionality of advanced IPsec application
Remote access VPNs
Hub-and-spoke VPNs
PKI
ADVPNs
Routing with IPsec
Overlapping IP addresses
Dynamic gateways
IPsec CoS

Given a scenario, demonstrate how to configure, troubleshoot, or monitor advanced IPsec functionality

Preparation
The resources listed on this section are recommended, but do not guarantee passing scores on JNCP exams. Success depends on each candidate’s motivation, experience, and dedication. Candidates may find additional resources not listed on this page helpful as well.

QUESTION 1
Your organization has multiple Active Directory domains to control user access. You must ensure that security policies are passing traffic based upon the users’ access rights.
What would you use to assist your SRX Series devices to accomplish this task?

A. JATP Appliance
B. JIMS
C. JSA
D. Junos Space

Correct Answer: B


QUESTION 2
You are asked to set up notifications if one of your collector traffic feeds drops below 100 kbps.
Which two configuration parameters must be set to accomplish this task? (Choose two.)

A. Set a traffic SNMP trap on the JATP appliance
B. Set a logging notification on the JATP appliance
C. Set a general triggered notification on the JATP appliance
D. Set a traffic system alert on the JATP appliance

Correct Answer: BD

QUESTION 3
You have configured static NAT for a webserver in your DMZ. Both internal and external users can reach the
webserver using the webserver’s IP address. However, only internal users can reach the webserver using the
webserver’s DNS name. When external users attempt to reach the webserver using the webserver’s DNS name, an error message is received.
Which action would solve this problem?

A. Disable Web filtering
B. Use DNS doctoring
C. Modify the security policy
D. Use destination NAT instead of static NAT

Correct Answer: B

QUESTION 4
Which interface family is required for Layer 2 transparent mode on SRX Series devices?

A. LLDP
B. Ethernet switching
C. inet
D. VPLS

Correct Answer: B

Actualkey Juniper JNCIP-SEC JN0-635 Exam pdf, Certkingdom Juniper JNCIP-SEC JN0-635 PDF

Best Juniper JNCIP-SEC JN0-635 Certification, Juniper JNCIP-SEC JN0-635 Training at certkingdom.com

CWNA-108 Certified Wireless Network Administrator Exam

 

CWNA-108 Objectives

Introduction
The Certified Wireless Network Administrator (CWNA) understands standards and operations of 802.11 wireless networks. Responsibilities include deploying, managing, monitoring, and basic troubleshooting of these networks. The CWNA has the ability to describe devices and operations of current WLAN technologies.

The CWNA exam has no prerequisites; however, the following are recommended before attempting the CWNA exam:
● Basic knowledge of networking (routers, switches, cabling, etc.)
● Basic knowledge of TCP/IP
● At least 1 year of work experience with wireless LAN technologies

The skills and knowledge measured by this examination are derived from a Job Task Analysis (JTA) involving wireless networking experts (CWNEs) and professionals. The results of this JTA were used in weighing the subject areas and ensuring that the weighting is representative of the relative importance of the content.
When you pass the CWNA exam, you earn credit towards the CWSP, CWDP, CWAP, and CWNE certifications and you earn the CWNA certification.
The following chart provides the breakdown of the exam as to the distribution of questions within each knowledge domain.

Radio Frequency (RF) Technologies
WLAN Regulations and Standards
WLAN Protocols and Devices
WLAN Network Architecture and Design Concepts
WLAN Network Security
RF Validation
WLAN Troubleshooting

CWNP Authorized Materials Use Policy
CWNP does not condone the use of unauthorized 'training materials' such as 'brain dumps'. Individuals who utilize such materials to pass CWNP exams will have their certifications revoked. In an effort to more clearly communicate CWNP's policy on use of unauthorized study materials, CWNP directs all certification candidates to the CWNP Candidate Conduct Policy at:


1.0 Radio Frequency (RF) Technologies – 15%
1.1 Define and explain the basic characteristics of RF and RF behavior
• Wavelength, frequency, amplitude, phase, sine waves
• RF propagation and coverage
• Reflection, refraction, diffraction and scattering
• Multipath and RF interference
• Gain and loss
• Amplification
• Attenuation
• Absorption
• Voltage Standing Wave Ratio (VSWR)
• Return Loss
• Free Space Path Loss (FSPL)

1.2 Apply the basic concepts of RF mathematics and measurement
• Watt and milliwatt
• Decibel (dB)
• dBm and dBi
• Noise floor
• SNR
• RSSI
• dBm to mW conversion rules of 10 and 3
• Equivalent Isotropically Radiated Power (EIRP)

1.3 Identify RF signal characteristics as they relate to antennas.
• RF and physical line of sight and Fresnel zone clearance
• Beamwidths
• Passive gain
• Polarization
• Antenna diversity types
• Radio chains
• Spatial multiplexing (SM)
• Transmit Beamforming (TxBF)
• Maximal Ratio Combining (MRC)
• MIMO

1.4 Explain and apply the functionality of RF antennas, antenna systems, and accessories available
• Omni-directional antennas
• Semi-directional antennas
• Highly directional antennas
• Reading Azimuth and Elevation charts for different antenna types
• Antenna orientation
• RF cables and connectors
• Lightning arrestors and grounding rods/wires

2.0 WLAN Regulations and Standards – 20%
2.1 Explain the roles of WLAN and networking industry organizations
• IEEE
• Wi-Fi Alliance
• IETF
• Regulatory domains and agencies

2.2 Explain and apply the various Physical Layer (PHY) solutions of the IEEE 802.11-2016 standard as amended including supported channel widths, spatial streams, data rates.
• DSSS – 802.11
• HR-DSSS – 802.11b
• OFDM – 802.11a
• ERP – 802.11g
• Wi-Fi 4 - HT – 802.11n
• Wi-Fi 5 - VHT – 802.11ac
• Wi-Fi 6 - HE - 802.11ax

2.3 Understand spread spectrum technologies, Modulation and Coding Schemes (MCS)
• DSSS
• OFDM
• OFDMA and Resource Units
• BPSK
• QPSK
• QAM (16, 64, 256,1024)

2.4 Identify and apply 802.11 WLAN functional concepts
• Primary channels
• Adjacent overlapping and non-overlapping channels
• Throughput vs. data rate
• Bandwidth
• Guard Interval

2.5 Describe the OSI model layers affected by the 802.11-2016 standard and amendments

2.6 Identify and comply with regulatory domain requirements and constraints (specifically in 2.4 GHz and 5 GHz)
• Frequency bands used by the 802.11 PHYs
• Available channels
• Regulatory power constraints
• Dynamic Frequency Selection (DFS)
• Transmit Power Control (TPC)

2.7 Explain basic use case scenarios for 802.11 wireless networks
• Wireless LAN (WLAN) – BSS and ESS
• Wireless bridging
• Wireless Ad-Hoc (IBSS)
• Wireless Mesh

3.0 WLAN Protocols and Devices – 20%
3.1 Describe the components and functions that make up an 802.11 wireless service set
• Stations (STAs)
• Basic Service Set (BSS) (Infrastructure mode)
• SSID
• BSSID
• Extended Service Set (ESS)
• IBSS (Ad-Hoc)
• Distribution System (DS)
• Distribution System Media (DSM)

3.2 Define terminology related to the 802.11 MAC and PHY
• MSDU, MPDU, PSDU, and PPDU
• A-MSDU and A-MPDU
• PHY preamble and header
3.3 Identify and explain the MAC frame format
• MAC frame format
• MAC addressing
3.4 Identify and explain the purpose of the three main 802.11 frame types
• Management
• Control
• Data

3.5 Explain the process used to locate and connect to a WLAN
• Scanning (active and passive)
• Authentication
• Association
• Open System Authentication and Shared Key authentication
• Connecting to 802.1X/EAP and Pre-Shared Key authentication networks
• BSS selection
• Connecting to hidden SSIDs

3.6 Explain 802.11 channel access methods
• DCF
• EDCA
• RTS/CTS
• CTS-to-Self
• NAV
• Interframe spaces (SIFS, DIFS, EIFS, AIFS)
• Physical carrier sense and virtual carrier sense
• Hidden node

3.7 Explain 802.11 MAC operations
• Roaming
• Power save modes and frame buffering
• Protection mechanisms

3.8 Describe features of, select, and install WLAN devices, control, and management systems
• Access Points (APs)
• WLAN controllers
• Wireless network management systems
• Wireless bridge and mesh APs
• Client devices

4.0 WLAN Network Architecture and Design Concepts– 15%

4.1 Describe and implement Power over Ethernet (PoE) 802.3af, 802.3at, 802.3bt
• Power Source Equipment
• Powered Device
• Midspan and endpoint PSEs
• Power classes to include power differences between PSE and PD
• Power budgets and powered port density

4.2 Define and describe differences, advantages and constraints of the different wireless LAN architectures
• Centralized data forwarding
• Distributed data forwarding
• Control, Management and Data planes
• Scalability and availability solutions
• Tunneling, QoS and VLANs

4.3 Describe design considerations for common deployment scenarios in wireless such as coverage requirements, roaming considerations, throughput, capacity and security
• Design considerations for data
• Design considerations for voice
• Design considerations for video
• Design considerations for location services including Real-Time Location Services (RTLS)
• Design considerations for highly mobile devices (e.g. tablets and smartphones)
• Capacity planning for high and very high-density environments
• Design considerations for guest access/BYOD
• Design considerations for supporting legacy 802.11 devices

4.4 Demonstrate awareness of common proprietary features in wireless networks.
• AirTime Fairness
• Band steering
• Dynamic power and channel management features

4.5 Determine and configure required network services supporting the wireless network
• DHCP for client addressing, AP addressing and/or controller discovery
• DNS for address resolution for clients and APs
• Time synchronization protocols (e.g. NTP, SNTP)
• VLANs for segmentation
• Authentication services (e.g. RADIUS, LDAP)
• Access Control Lists for segmentation
• Wired network capacity requirements

5.0 WLAN Network Security – 10%

5.1 Identify weak security options that should not be used in enterprise WLANs
• WEP
• Shared Key authentication
• SSID hiding as a security mechanism
• MAC filtering
• Use of deprecated security methods (e.g. WPA and/or WPA2 with TKIP)
• Wi-Fi Protected Setup (WPS)

5.2 Identify and configure effective security mechanisms for enterprise WLANs
• Application of AES with CCMP for encryption and integrity
• WPA2-Personal including limitations and best practices for pre-shared (PSK) use
• WPA2-Enterprise -configuring wireless networks to use 802.1X including connecting to RADIUS servers and appropriate EAP methods

5.3 Understand basic concepts of WPA3 and Opportunistic Wireless Encryption (OWE) and enhancements compared to WPA2
• Understand basic security enhancements in WPA3 vs. WPA2
• Understand basic security enhancements of encryption and integrity in WPA3 (e.g. CCMP, GCMP, AES)
• Simultaneous Authentication of Equals (SAE) in WPA3 as an enhancement for legacy pre-shared key technology
• Understand the purpose of Opportunistic Wireless Encryption (OWE) for public and guest networks

5.4 Describe common security options and tools used in wireless networks
• Access control solutions (e.g. captive portals, NAC, BYOD)
• Protected management frames
• Fast Secure Roaming methods
• Wireless Intrusion Prevention System (WIPS) and/or rogue AP detection
• Protocol and spectrum analyzers
• Best practices in secure management protocols (e.g. encrypted management HTTPS, SNMPv3, SSH2, VPN and password management)

6.0 RF Validation – 10%
6.1 Verify and document that design requirements are met including coverage, throughput, roaming, and connectivity with a post-implementation validation survey
6.2 Locate and identify sources of RF interference
• Identify RF disruption from 802.11 wireless devices including contention vs. interference and causes/sources of both including co-channel contention (CCC), overlapping channels, and 802.11 wireless device proximity
• Identify sources of RF interference from non-802.11 wireless devices based on the investigation of airtime and frequency utilization
• Understand interference mitigation options including removal of interference source or change of wireless channel usage

6.3 Perform application testing to validate WLAN performance
• Network and service availability
• VoIP testing
• Real-time application testing
• Throughput testing

6.4 Understand and use the basic features of validation tools
• Use of throughput testers for validation tasks
• Use of wireless validation software (specifically survey software and wireless scanners)
• Use of protocol analyzers for validation tasks
• Use of spectrum analyzers for validation tasks

7.0 WLAN Troubleshooting – 10%
7.1 Describe and apply common troubleshooting tools used in WLANs
• Use of protocol analyzers for troubleshooting tasks
• Use of spectrum analyzers for identifying sources of interference
• Use of management, monitoring and logging systems for troubleshooting tasks
• Use of wireless LAN scanners for troubleshooting tasks

7.2 Identify and troubleshoot common wireless issues
• Identify causes of insufficient throughput in the wireless distribution systems including LAN port speed/duplex misconfigurations, insufficient PoE budget, and insufficient Internet or WAN bandwidth
• Identify and solve RF interference using spectrum analyzers
• Identify wireless performance issues using SNR, retransmissions, and airtime utilization statistics
• Identify causes of wireless issues related to network services including DHCP, DNS, and time protocols including using native interface and IP configuration tools (e.g. pings, DNS lookups, interface configuration)
• Identify wireless issues related to security configuration mismatches

QUESTION 1
What can an impedance mismatch in the RF cables and connectors cause?

A. Increased range of the RF signal
B. Fewer MCS values in the MCS table
C. Increased amplitude of the RF signal
D. Excessive VSWR

Correct Answer: D

QUESTION 2
A WLAN transmitter that emits a 50 mW signal is connected to a cable with 3 dB loss. If the cable is connected
to an antenna with 9dBi gain, what is the EIRP at the antenna element?

A. 26 dBm
B. 13 dBm
C. 23 dBm
D. 10 dBm

Correct Answer: C

QUESTION 3
In a long-distance RF link, what statement about Fade Margin is true?

A. A Fade Margin is unnecessary on a long-distance RF link if more than 80% of the first Fresnel zone is clear of obstructions.
B. The Fade Margin is a measurement of signal loss through free space and is a function of frequency and distance.
C. Fade Margin is an additional pad of signal strength designed into the RF system to compensate for unpredictable signal fading.
D. The Fade Margin of a long-distance radio link should be equivalent to the receiver’s low noise filter gain.

Correct Answer: C

 

Actualkey CWNP CWNA-108 exam pdf, Certkingdom CWNP CWNA-108 PDF

Best CWNP CWNA-108 Certification, CWNP CWNA-108 Training at certkingdom.com