Deck 36: Performing CyberOps Using Core Security Technologies (CBRCOR)

Question 1

Refer to the exhibit. A developer must construct an HTTP Request to use the XML API to set a Personal Meeting Room PIN for a given user. Which code completes the code to create the request?

A) xmlhttp.open("GET", "https://cisco.webex.com/WBXService/XMLService");
B) xmlhttp.open("PATCH", "https://cisco.webex.com/WBXService/XMLService");
C) xmlhttp.open("PUT", "https://cisco.webex.com/WBXService/XMLService");
D) xmlhttp.open("POST", "https://cisco.webex.com/WBXService/XMLService");

Answer 1

xmlhttp.open("POST", "https://cisco.webex.com/WBXService/XMLService");

Question 2

Refer to the exhibit. When using the Webex Browser SDK to create calls and share screens, which two statements are valid given a 'webex' object such as displayed in the exhibit? (Choose two.)

A) After a meeting is joined, it cannot be left programmatically until the host ends the meeting.
B) The webex meetings.register() function must be invoked before attempting to join any meeting.
C) The joinMeeting() function throws an error of type 'media stopped' if a media stream is stopped.
D) Given a Webex meeting number the webex meetings join() function can be used to join the meeting.
E) The mediaSettings for a joined meeting accepts boolean attributes to send and receive audio, video, and screen share.

Answer 2

After a meeting is joined, it cannot be left programmatically until the host ends the meeting.
The webex meetings.register() function must be invoked before attempting to join any meeting.

Question 3

Which xAPI access mechanism requires separate connections for commands and notifications?

A) Serial
B) WebSocket
C) HTTP/HTTPS
D) SSH

Answer 3

SSH

Question 4

A Webex Teams bot is deployed but soon it stops responding. Which two explanations are the cause of the issue? (Choose two.)

A) A new webhook was created, which marks the old webhook as inactive.
B) The web server that is set to receive webhooks is not configured to return a 200 message. And the webhook is disabled.
C) The webhook secret is expired and must be refreshed.
D) The refresh token is not being used.
E) The bot owner regenerated the access token on developer.webex.com.

Question 5

Refer to the exhibit. A Webex Teams REST API response is shown with the HTTP Header missing. Which HTTP header expected in this response?

A) Push
B) Link
C) Patch
D) Put

Question 6

Refer to the exhibit. A macro and a UI extension (also called In-Room Control) are being developed. What is the reason for the error displayed in the console?

A) Widgets of type "Slider" are not supported on the device.
B) The UI extension was not exported to the device.
C) The name of the widget in the macro and the UI extension must match.
D) Promises are not supported for this device.

Question 7

Refer to the exhibit. Which code for blank lines 26, 27, and 28 gives invitees 900 seconds before the scheduled time to join the meeting, sets the meeting to last for 30 minutes, and sets the meeting timezone to Pacific US?

A)
B)
C)
D)

Question 8

Refer to the exhibit. A snippet from the XSD schema of the Webex Meeting XML API 'LstRecordingResponse' element is listed in the exhibit. Assuming that a variable named 'resp' exists that contains the XML response from a successful 'LstRecording' request, which code snippet correctly generates a simple report that lists meeting names and recording file download links?

A)
B)
C)
D)

Question 9

With CE 9.8 and above, which two statements are correct when an application is sending and receiving data over a connection established with an xAPI interface? (Choose two.)

A) All Serial, SSH, and WebSockets can be used to send and receive data.
B) HttpClient can be used to send requests but not receive responses.
C) HttpFeedback is the only option to receive data.
D) The HttpClient command can be used to send requests and read responses over HTTP.
E) WebSockets is the only option to send and receive data.

Question 10

Which expression is a valid Webex Teams webhook filter?

A) personEmail=[e-mail]+roomId=abc123
B) personEmail=[e-mail]-roomId=abc123
C) personEmail=[e-mail]&roomId=abc123
D) personEmail=[e-mail],roomId=abc123

Question 11

What happens if a meeting is in progress when a DelMeeting request is sent in the Webex Meetings XML API?

A) The meeting host is notified and prompted to allow the meeting to be deleted.
B) The DelMeeting request drops all call-in users and deletes the meeting.
C) The DelMeeting request waits until the meeting is completed and then deletes the meeting.
D) The DelMeeting request results in an error.

Question 12

Refer to the exhibit. A webhook has been created so that an application is notified when users mention a bot in a Webex Teams space. The exhibit shows an example of a notification received by the application. Which code snippet correctly processes the JSON payload using the Webex Node.js SDK in order to print out messages that mention the bot?

A)
B)
C)
D)

Question 13

Which element is needed to build a Web application that authenticates Webex users and can post messages under the user's identity?

A) OAuth integration configured with the 'messages_write' scope
B) bot access token
C) Guest Issuer application
D) self-signed certificate that is created from a public authority

Question 14

Refer to the exhibit. On line 4, the script retrieves a context from a DOM element that was generated from a server-side component. How does that server-side component obtain the value for the 'context' element?

A) by opening a dialog asking the end-user to paste his personal access token
B) by completing an authorization code grant flow using the identifier and secret of an OAuth integration
C) by embedding the access token of a Bot account
D) by creating a guest token using the identifier and secret of a Guest Issuer application

Question 15

Which two statements about Webex Teams refresh tokens are true? (Choose two.)

A) The refresh token is useless without the client ID and client secret.
B) An attacker can use the refresh token to send messages on behalf of the user.
C) The refresh token is used to generate a new access token.
D) A new refresh token cannot be granted until the client ID is invalidated.
E) The refresh token does not expire.

Question 16

Refer to the exhibit. With this in-room configuration, which command successfully sets the slider to 50?

A) xcommand UserInterface Extensions Widget SetSlider Value: 50
B) xcommand UserInterface Extensions Widget Slider: 50 Widget: "widget_1"
C) xconfiguration UserInterface Extensions widget_1 50
D) xcommand UserInterface Extensions Widget SetValue WidgetId: "widget_1" Value: 50

Question 17

Refer to the exhibit. What causes the error message?

A) xapi must be enabled for promises.
B) HttpClient AllowInsecureHTTPS has not been enabled.
C) The NODE_TLS_REJECT_UNAUTHORIZED environment variable must be set to 0.
D) HttpClient must be changes to HttpsClient.

Question 18

Which two capabilities are currently supported by the Webex Meetings XML API? (Choose two.)

A) Request a recording link for playback.
B) Send a text message to the meeting host.
C) Request permissions to schedule on someone else's behalf.
D) Schedule a new meeting.
E) Send a problem report.

Question 19

Which two items are needed to give a Webex user the ability to archive all Webex Teams messages for an organization? (Choose two.)

A) Give the user "Read-only administrator privileges" in the Webex Control Hub.
B) Create an Integration app with all "spark_compliance" read scopes enabled.
C) Use the Webex Meetings XML API "SetUser" to update the user's "" value to "TRUE".
D) Configure the user as a "Compliance Officer" in the Webex Control Hub.
E) Create a Bot app with all "webex_compliance" read scopes enabled.

Question 20

Refer to the exhibit. The Node.js script shown uses the Webex Meetings XML API to print "Here!" to the console. Which statement is a correct observation about the results of the script?

A) The was not complex enough.
B) The credential was expired.
C) The WebexMeetings XML API service processed the request.
D) The meeting was created successfully.

Question 21

Refer to the exhibit. Certain lighting conditions are needed when hosting Webex meetings for a particular department in a company. A split button that integrates with the lighting controls is added to the Touch 10. However, when the user selects Chill, the lights turn off completely. Which code change resolves this issue?

A) Change xapi.event to xapi.httpfeedback.
B) Set x.Type to 'pressed' instead of 'released'.
C) Set x.Type to 'clicked' instead of 'released'.
D) Pass x.Value instead of x to the lights function.

Question 22

Which two statements about incoming WebEx call notifications on iOS and Android applications are true? (Choose two.)

A) When running in the background on Android, Firebase Cloud Messaging must use a notification message.
B) When running in the background on Android, Firebase Cloud Messaging must use a data message.
C) Webhooks are required with the iOS SDK only when the application is in the background.
D) When running in the background on iOS, Application Push Notifications must be configured to be silent.
E) Webhooks are required in the foreground and background for iOS and Android applications.

Question 23

Refer to the exhibit. What is the Webex Teams REST API HTTP response status code, based on this code snippet?

A) 401
B) 403
C) 429
D) 501

Question 24

Refer to the exhibit. An end user reports that the speed dial button is not working on their Webex Device, and when loading into the Macro Editor, this error was presented. On which line is the incorrect syntax?

A) line 4
B) line 14
C) line 15
D) line 22

Question 25

Which Webex Teams webhook resource type indicates that a user interacted with a card?

A) buttonActions
B) attachmentActions
C) webhookCardActions
D) cardActions

Question 26

Which code adds a Space Widget in an HTML script that uses the CSS Webex CDN?

A)
B)

Question 27

Which two tasks should use a Webex bot instead of aWebex integration? (Choose two.)

A) Ask a question in natural language to obtain the current price of a stock.
B) Translate a word or phrase from Italian to English.
C) Notify all users who send a 1:1 message that the user is currently out of the office.
D) Automatically delete a message that was sent with spelling or grammatical errors.
E) Archive all the messages in a group space.

Question 28

Which two statements are true when comparing the SSH, HTTP, and WebSocket interfaces of a Cisco Collaboration device? (Choose two.)

A) The SSH interface supports XML payloads only.
B) The SSH, HTTP, and WebSocket interfaces support JSON and XML payloads.
C) The HTTP interface supports JSON and XML payloads.
D) Communications can be encrypted for all SSH, HTTP, and WebSocket interfaces.
E) The WebSocket interface supports JSON payloads only.

Question 29

Which two statements about using the Compliance Office role to manage data in Webex Teams are true? (Choose two.)

A) For group rooms with members from multiple organizations, only the compliance officer of the owning organization can manage all data.
B) The compliance officer can manage data only for users who have granted the spark-compliance messages scope.
C) For direct rooms between two organizations, each compliance officer can manage data only from their organization.
D) For group rooms with members from multiple organizations, either compliance offcer can manage all data.
E) For direct rooms between two organizations, the compliance officer of either organization can manage all data.

Question 30

Refer to the exhibit. A company uses Webex Teams extensively for communications involving customers, and want to enforce a consistent messaging policy. Which code completes line 20 to send a notification when noncompliant messages are detected?

A) events?resource=people
B) compliance?resource=messages
C) events?resource=messages
D) compliance?resource=people

Question 31

Which two statements describe valid limitations for Webex Teams bot accounts in a group space? (Choose two.)

A) A bot account cannot send a message without an SSL certificate.
B) A bot account cannot hear a message unless the bot is @ mentioned.
C) A bot account cannot send a message without a valid access token.
D) A bot account cannot respond to another bot.
E) A bot account cannot send a message with an @mention.

Question 32

Refer to the exhibit. Which Webex Teams REST API request has generated the response body in the exhibit?

A) GET/v1/rooms?sortBy=lastactivity
B) GET/v1/rooms?sortBy=created
C) GET/v1/rooms?max= 1 GET/v1/rooms?max= 1
D) GET/v1/spaces?orderBy=lastActivity

Question 33

A company wants to adopt Webex Teams as a messaging platform and use REST APIs to automate the creation of teams and rooms. Which sequence of REST API requests is needed to create and populate a new Webex team and create a populated Webex room for the team?

A) POST /teams, POST /memberships, POST /rooms
B) POST /teams, POST /people, POST /rooms
C) POST /teams, POST /team/memberships, POST /rooms
D) POST /teams, POST /team/memberships, POST /rooms, POST /memberships

Question 34

Which list of API calls must be made to provision 50 new Webex Room devices for an organization?

A) POST to /places with 'displayName', POST the returned 'placeId' to /devices/
B) POST 'displayName' to /places, POST the returned 'placeId' to /devices/activationCode
C) POST to /licenses, POST the returned 'licneseId' and a specified 'displayName' to /devices
D) POST to /licenses, POST 'displayName' to /places, POST 'licensed' and placeId' to /devices

Question 35

Which user role implicitly has permission in the Events API to retrieve "message created" events from other users in the same organization?

A) Compliance Officer
B) User and Device Administrator
C) Full Administrator
D) User Administrator

Question 36

Which two filters are valid for limiting a webhook? (Choose two.)

A) roomId=
B) personId!=
C) spaceId=
D) personId=$spaceId=
E) personId=$roomId=

Question 37

Refer to the exhibit. Assume that there is already a connection to a device for this jsxapi.code snippet. Which snippet completes the code so that the connected device makes a call to the user [e-mail]?

A)
B)
C)
D)