In a mutual TLS (mTLS) setup for an API, what does the server do with the client's certificate during the handshake?

It decrypts the certificate using the server's private key

It validates the certificate against a trusted CA and checks that the client is authorized

It stores the certificate in a public key infrastructure (PKI) for future reference

It sends the certificate back to the client for confirmation

Which technique can help mitigate the performance overhead of TLS on API communications?

Increasing the API timeout value to allow more time for encryption

Using HTTP/1.0 instead of HTTP/2 to reduce protocol overhead

Disabling encryption for all API endpoints to improve speed

Using TLS session resumption to avoid repeating the full handshake

A company's API processes sensitive data that is temporarily cached in memory and then written to a log file for debugging. The security team wants to ensure the data is protected at rest. Which control is most appropriate for the log file?

Clear the memory cache after each request

Use a strong cipher suite for the API

Encrypt the log file at the file system or application level

What is the role of a cipher suite in TLS/SSL for API security?

It controls the maximum size of API payloads

It specifies the IP address and port of the API server

It defines the algorithms used for key exchange, encryption, and message authentication

It determines the API authentication method (e.g., OAuth, API key)

A team is designing a public API that will be accessed by mobile clients on unreliable networks. They are concerned about the latency impact of TLS handshakes on every new connection. Which strategy reduces the number of full TLS handshakes while maintaining security?

Use HTTP/2 with TLS session resumption

Use HTTP/1.1 with a new connection per request

Use a shorter TLS key length, such as 1024-bit RSA

CiscoCertified DevNet Professional

Domain 4Objective 11

Describe How End-To-End Encryption Principles Apply to APIs 350-901 Practice Questions (Page 4)

Part of the 4.0 Application Deployment and Security domain, which accounts for 20% of the 350-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

20%of the exam

Questions 16–20

16foundation · easy
In a mutual TLS (mTLS) setup for an API, what does the server do with the client's certificate during the handshake?
Select an answer first
17foundation · easy
Which technique can help mitigate the performance overhead of TLS on API communications?
Select an answer first
18application · medium
A company's API processes sensitive data that is temporarily cached in memory and then written to a log file for debugging. The security team wants to ensure the data is protected at rest. Which control is most appropriate for the log file?
Select an answer first
19foundation · easy
What is the role of a cipher suite in TLS/SSL for API security?
Select an answer first
20application · medium
A team is designing a public API that will be accessed by mobile clients on unreliable networks. They are concerned about the latency impact of TLS handshakes on every new connection. Which strategy reduces the number of full TLS handshakes while maintaining security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-901” is a trademark of its owner, used for identification only.