Which three core principles are directly provided by end-to-end encryption when applied to API communications?

Authorization, accounting, and auditing

Confidentiality, integrity, and authentication

Non-repudiation, compression, and caching

Availability, scalability, and redundancy

What distinguishes mutual TLS (mTLS) from standard TLS in an API interaction?

The server uses a self-signed certificate instead of a CA-signed one

Only the client verifies the server's certificate

The encryption algorithm is always AES-256 instead of AES-128

Both the client and the server present certificates to authenticate each other

Why is regular key rotation important for API encryption keys?

To limit the amount of data exposed if a key is compromised

To eliminate the need for certificate validation

To increase the encryption speed of API requests

To reduce the size of the encrypted payloads

An organization manages TLS certificates for multiple APIs. The security team wants to automate the renewal process to avoid certificate expiry outages. Which approach is most effective?

Manually renew certificates every year

Disable certificate validation on clients

Use the ACME protocol with a certificate management tool to automatically renew certificates before expiry

Use a long-lived certificate that never expires

A security architect is designing a new API for a government agency. The requirements are: (1) data must be encrypted in transit, (2) the client must be able to verify the server's identity, and (3) the server must be able to verify the client's identity. Which of the following controls satisfy all three requirements? Select all that apply.

TLS with client certificate validation

mTLS with both client and server certificates

Application-layer encryption with a shared key

TLS with a self-signed server certificate

TLS with server certificate validation

CiscoCertified DevNet Professional

Domain 4Objective 11

Describe How End-To-End Encryption Principles Apply to APIs 350-901 Practice Questions (Page 5)

Part of the 4.0 Application Deployment and Security domain, which accounts for 20% of the 350-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

20%of the exam

Questions 21–25

21foundation · easy
Which three core principles are directly provided by end-to-end encryption when applied to API communications?
Select an answer first
22foundation · easy
What distinguishes mutual TLS (mTLS) from standard TLS in an API interaction?
Select an answer first
23foundation · easy
Why is regular key rotation important for API encryption keys?
Select an answer first
24application · medium
An organization manages TLS certificates for multiple APIs. The security team wants to automate the renewal process to avoid certificate expiry outages. Which approach is most effective?
Select an answer first
25expert · hard · select all that apply
A security architect is designing a new API for a government agency. The requirements are: (1) data must be encrypted in transit, (2) the client must be able to verify the server's identity, and (3) the server must be able to verify the client's identity. Which of the following controls satisfy all three requirements? Select all that apply.
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-901” is a trademark of its owner, used for identification only.