300-735 Exam - Automating and Programming Cisco Security Solutions (SAUTO)

NEW QUESTION 1
After changes are made to the Cisco Firepower Threat Defense configuration using the Cisco Firepower Device Manager API, what must be done to ensure that the new policy is activated?

• A. Submit a POST to the /api/fdm/latest/operational/deploy URI.
• B. Submit a GET to the /api/fdm/latest/operational/deploy URI.
• C. Submit a PUT to the /api/fdm/latest/devicesettings/pushpolicy URI.
• D. Submit a POST to the /api/fdm/latest/devicesettings/pushpolicy URI.

Answer: A

NEW QUESTION 2
DRAG DROP
Drag and drop the items to complete the ThreatGRID API call to return a curated feed of sinkholed-ip-dns in stix format. Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 3
What is the purpose of the snapshot APIs exposed by Cisco Stealthwatch Cloud?

• A. Report on flow data during a customizable time period.
• B. Operate and return alerts discovered from infrastructure observations.
• C. Return current configuration data of Cisco Stealthwatch Cloud infrastructure.
• D. Create snapshots of supported Cisco Stealthwatch Cloud infrastructure.

Answer: B

NEW QUESTION 4
DRAG DROP
Drag and drop the code to complete the API call to query all Cisco Stealthwatch Cloud observations. Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 5
What are two advantages of Python virtual environments? (Choose two.)

• A. Virtual environments can move compiled modules between different platforms.
• B. Virtual environments permit non-administrative users to install packages.
• C. The application code is run in an environment that is destroyed upon exit.
• D. Virtual environments allow for stateful high availability.
• E. Virtual environments prevent packaging conflicts between multiple Python projects.

Answer: CE

NEW QUESTION 6
What are two capabilities of Cisco Firepower Management Center eStreamer? (Choose two.)

• A. eStreamer is used to get sources for intelligence services.
• B. eStreamer is used to send malware event data.
• C. eStreamer is used to get a list of access control policies.
• D. eStreamer is used to send policy data.
• E. eStreamer is used to send intrusion event data.

Answer: BE

NEW QUESTION 7
Which API capability is available on Cisco Firepower devices?

• A. Firepower Management Center - Sockets API
• B. Firepower Management Center - eStreamer API
• C. Firepower Management Center - Camera API
• D. Firepower Management Center - Host Output API

Answer: B

NEW QUESTION 8
A security network engineer must implement intrusion policies using the Cisco Firepower Management Center API.
Which action does the engineer take to achieve the goal?

• A. Make a PATCH request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.
• B. Make a POST request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.
• C. Intrusion policies can be read but not configured using the Cisco Firepower Management Center API.
• D. Make a PUT request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.

Answer: C

NEW QUESTION 9
FILL BLANK
Fill in the blank to complete the statement with the correct technology.
Cisco Investigate provides access to data that pertains to DNS security events and correlations collected by the Cisco security team.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Umbrella

NEW QUESTION 10
Refer to the exhibit. A network operator wants to add a certain IP to a DMZ tag.
Which code segment completes the script and achieves the goal?

• A.
• B.
• C.
• D.

Answer: A

NEW QUESTION 11
In Cisco AMP for Endpoints, which API queues to find the list of endpoints in the group "Finance Hosts," which has a GUID of 6c3c2005-4c74-4ba7-8dbb-c4d5b6bafe03?

• A. https://api.amp.cisco.com/v1/endpoints?group[]=6c3c2005-4c74-4ba7-8dbb-c4d5b6bafe03
• B. https://api.amp.cisco.com/v1/computers?group_guid[]=6c3c2005-4c74-4ba7-8dbb-c4d5b6bafe03
• C. https://api.amp.cisco.com/v1/computers?group_guid-6c3c2005-4c74-4ba7-8dbb-c4d5b6bafe03
• D. https://api.amp.cisco.com/v1/endpoints?group-6c3c2005-4c74-4ba7-8dbb-c4d5b6bafe03

Answer: B

NEW QUESTION 12
Which two URI parameters are needed for the Cisco Stealthwatch Top Alarm Host v1 API? (Choose two.)

• A. startAbsolute
• B. externalGeos
• C. tenantId
• D. intervalLength
• E. tagID

Answer: CE

NEW QUESTION 13

Refer to the exhibit. A security engineer created a script and successfully executed it to retrieve all currently open alerts. Which print command shows the first returned alert?

• A. print(response[data][0])
• B. print(response[results][0])
• C. print(response.json()[data][0])
• D. print(response.json()[results][0])

Answer: A

NEW QUESTION 14
DRAG DROP
Drag and drop the code to complete the script to search Cisco ThreatGRID and return all public submission records associated with cisco.com. Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 15
Which description of synchronous calls to an API is true?

• A. They can be used only within single-threaded processes.
• B. They pause execution and wait for the response.
• C. They always successfully return within a fixed time.
• D. They can be used only for small requests.

Answer: B

NEW QUESTION 16
DRAG DROP
Drag and drop the code to complete the Cisco Umbrella Investigate WHOIS query that returns a list of domains that are associated with the email address "admin@example.com". Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 17
Which header set should be sent with all API calls to the Cisco Stealthwatch Cloud API?

• A.
• B.
• C.
• D.

Answer: B

NEW QUESTION 18
Refer to the exhibit.
Which expression prints the text "802.1x"?

• A. print(quiz[0]['choices']['b'])
• B. print(quiz['choices']['b'])
• C. print(quiz[0]['choices']['b']['802.1x'])
• D. print(quiz[0]['question']['choices']['b'])

Answer: A

NEW QUESTION 19
Which curl command lists all tags (host groups) that are associated with a tenant using the Cisco Stealthwatch Enterprise API?

• A. curl -X PUT"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags
• B. curl -X POST -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/tags
• C. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags
• D. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc- configuration/rest/v1/tenants/tags

Answer: C

NEW QUESTION 20

Refer to the exhibit. The security administrator must temporarily disallow traffic that goes to a production web server using the Cisco FDM REST API. The administrator sends an API query as shown in the exhibit. What is the outcome of that action?

• A. The given code does not execute because the mandatory parameters, source, destination, and services are missin
• B. The given code does not execute because it uses the HTTP method "PUT". It should use the HTTP method "POST".
• C. The appropriate rule is updated with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.
• D. A new rule is created with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.

Answer: C

NEW QUESTION 21
For which two programming languages does Cisco offer an SDK for Cisco pxGrid 1.0? (Choose two.)

• A. Python
• B. Perl
• C. Java
• D. C
• E. JavaScript

Answer: CD

NEW QUESTION 22
......