exam questions

Exam 350-601 All Questions

View all questions & answers for the 350-601 exam

Exam 350-601 topic 1 question 243 discussion

Actual exam question from Cisco's 350-601
Question #: 243
Topic #: 1
[All 350-601 Questions]

Which two methods are available to manage an ACI REST API session authentication when a user is unauthenticated? (Choose two.)

  • A. POST to aaaUserLogin
  • B. GET to aaaListDomains
  • C. GET aaaRefresh
  • D. DELETE to aaaLogout
  • E. POST to aaaLogin
Show Suggested Answer Hide Answer
Suggested Answer: CE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Yorsh
Highly Voted 4 years, 7 months ago
CorrectThese API methods enable you to manage session authentication: aaaLogin —Sent as a POST message, this method logs in a user and opens a session. The message body contains an aaa:User object with the name and password attributes, and the response contains a session token and cookie. If multiple AAA login domains are configured, you must prepend the user's name with apic: domain\\ . aaaRefresh —Sent as a GET message with no message body or as a POST message with the aaaLogin message body, this method resets the session timer. The response contains a new session token and cookie. aaaLogout —Sent as a POST message, this method logs out the user and closes the session. The message body contains an aaa:User object with the name attribute. The response contains an empty data structure. aaaListDomains —Sent as a GET message, this method returns a list of valid AAA login domains. You can send this message without logging in. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html
upvoted 11 times
...
MQMQ
Highly Voted 3 years, 5 months ago
B and E are the only ones that make sense. you can either login, or list domains.
upvoted 7 times
...
bizzar7774
Most Recent 2 weeks, 5 days ago
Selected Answer: BE
I pick B & E because the user is not yet authenticated, so first is B (to retrieve domain list) and then is E (to login)
upvoted 1 times
...
boyd_05
5 months, 4 weeks ago
Selected Answer: CE
CE. Answered and explained in Pluralsight video.
upvoted 1 times
...
paradigm88
1 year, 9 months ago
Selected Answer: BE
for unauthentificated user
upvoted 2 times
...
g_kuchima
2 years ago
B and E
upvoted 2 times
...
GuyThatTakesDumps
2 years, 3 months ago
Selected Answer: CE
C and E
upvoted 2 times
...
Gopz28
3 years ago
When a login message is accepted, the API returns a data structure that includes a session timeout period in seconds and a token that represents the session. The token is also returned as a cookie in the HTTP response header. To maintain your session, you must send login refresh messages to the API if no other messages are sent for a period longer than the session timeout period. The token changes each time that the session is refreshed. Answer is definitely C & E. aaalogin to login with username and password aaaRefresh along with aaaLogin to keep refreshing your session from timeout. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html
upvoted 2 times
...
masal
3 years, 4 months ago
session token and cookie are the key terms here C and E
upvoted 2 times
...
Dspam
3 years, 5 months ago
Answer is B and C aaaRefresh and aaaListDomains The rest there is an explicit mention of requiring the message body containing object user. which implies some kind of user logged in is required.
upvoted 2 times
...
Daeh
3 years, 6 months ago
Answer is B and C. There's no reason to do a POST to aaaLogin AFTER you've been authenticated like the question states. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html
upvoted 2 times
misjdg11
3 years, 6 months ago
The question states "when a user is unauthenticated".
upvoted 1 times
Daeh
3 years, 5 months ago
You're right. I read it as "authenticated". Valid "unauthenticated" requests are B and E. aaaLogin — Sent as a POST message, this method logs in a user and opens a session. The message body contains an aaa:User object with the name and password attributes, and the response contains a session token and cookie aaaListDomains — Sent as a GET message, this method returns a list of valid AAA login domains. You can send this message without logging in.
upvoted 4 times
Valkyrie17
3 years, 5 months ago
I agree. As you wrote, valid *unauthenticated* requests are B and E.
upvoted 3 times
...
...
...
...
CactusJoe
3 years, 8 months ago
The right answer is B and D The aaaRefresh just resets the session timer, but aaaListDomains can be used to list login domains without logging in.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago