DRAG DROP
Refer to the exhibit.
Drag and drop the elements from the left onto the script on the right that queries Cisco ThreatGRID for indications of
compromise.
Select and Place:
Explanation:
Reference: https://community.cisco.com/t5/endpoint-security/amp-threat-grid-api/m-p/3538319
Which API capability is available on Cisco Firepower devices?
B
None
Which API is designed to give technology partners the ability to send security events from their platform/service/appliance
within a mutual customer's environment to the Umbrella cloud for enforcement?
C
None
Refer to the exhibit. The security administrator must temporarily disallow traffic that goes to a production web server using
the Cisco FDM REST API. The administrator sends an API query as shown in the exhibit.
What is the outcome of that action?
C
None
Refer to the exhibit. A security engineer attempts to query the Cisco Security Management appliance to retrieve details of a
specific message.
What must be added to the script to achieve the desired result?
C
None
What is the purpose of the snapshot APIs exposed by Cisco Stealthwatch Cloud?
B
None
Which two event types can the eStreamer server transmit to the requesting client from a managed device and a
management center? (Choose two.)
B D
None
For which two programming languages does Cisco offer an SDK for Cisco pxGrid 1.0? (Choose two.)
C D
None
DRAG DROP
Drag and drop the items to complete the curl request to the ThreatGRID API. The API call should request the first 10 IP
addresses that ThreatGRID saw samples communicate with during analysis, in the first two hours of January 18th (UTC
time), where those communications triggered a Behavior Indicator that had a confidence equal to or higher than 75 and a
severity equal to or higher than 95.
Select and Place:
Explanation:
Reference:
https://support.umbrella.com/hc/en-us/articles/231248768-Cisco-Umbrella-Cisco-AMP-Threat-Grid-Cloud-Integration-Setup-
Guide
DRAG DROP
Drag and drop the code to complete the curl command to query the Cisco Umbrella Investigate API for the umbrella
popularity list. Not all options are used.
Select and Place:
Explanation:
Reference: https://docs.umbrella.com/investigate-api/reference
What are two benefits of Ansible when managing security platforms? (Choose two.)
C E
None
Which request searches for a process window in Cisco ThreatGRID that contains the word “secret”?
D
None
After changes are made to the Cisco Firepower Threat Defense configuration using the Cisco Firepower Device Manager
API, what must be done to ensure that the new policy is activated?
A
None
Which two APIs are available from Cisco ThreatGRID? (Choose two.)
C E
None
Which snippet describes the way to create an URL object in Cisco FDM using FDM REST APIs with curl?
B
None