cisco 300-735 practice test

Exam Title: automating cisco security solutions (sauto)

Last update: Jul 05 ,2025
Question 1

Which curl command lists all tags (host groups) that are associated with a tenant using the Cisco Stealthwatch Enterprise API?

  • A. curl -X PUT"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags
  • B. curl -X POST -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/tags
  • C. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags
  • D. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/tags
Answer:

c

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 2

DRAG DROP Drag and drop the code to complete the script to search Cisco ThreatGRID and return all public submission records associated with cisco.com. Not all options are used.
Select and Place:

Answer:


Reference:
https://community.cisco.com/t5/endpoint-security/amp-threat-grid-api/m-p/3538319

Comments
Question 3

DRAG DROP A Python script is being developed to return the top 10 identities in an organization that have made a DNS request to www.cisco.com.
Drag and drop the code to complete the Cisco Umbrella Reporting API query to return the top identities. Not all options are used.
Select and Place:

Answer:


Reference:
https://docs.umbrella.com/umbrella-api/docs/reporting-destinations-most-recent-requests

Comments
Question 4

Which description of synchronous calls to an API is true?

  • A. They can be used only within single-threaded processes.
  • B. They pause execution and wait for the response.
  • C. They always successfully return within a fixed time.
  • D. They can be used only for small requests.
Answer:

b

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 5

The Cisco Security Management Appliance API is used to make a GET call using the URI /sma/api/v2.0/reporting/mail_incoming_traffic_summary/ detected_amp?startDate=2016-09-10T19:00:00.000Z&endDate=2018-09-24T23:00:00.000Z&device_type=esa&device_name=esa01.
What does this GET call return?

  • A. values of all counters of a counter group, with the device group name and device type for web
  • B. value of a specific counter from a counter group, with the device name and type for email
  • C. value of a specific counter from a counter group, with the device name and type for web
  • D. values of all counters of a counter group, with the device group name and device type for email
Answer:

d

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 6

For which two programming languages does Cisco offer an SDK for Cisco pxGrid 1.0? (Choose two.)

  • A. Python
  • B. Perl
  • C. Java
  • D. C
  • E. JavaScript
Answer:

cd

vote your answer:
A
B
C
D
E
A 0 B 0 C 0 D 0 E 0
Comments
Question 7


Refer to the exhibit. The security administrator must temporarily disallow traffic that goes to a production web server using the Cisco FDM REST API. The administrator sends an API query as shown in the exhibit.
What is the outcome of that action?

  • A. The given code does not execute because the mandatory parameters, source, destination, and services are missing.
  • B. The given code does not execute because it uses the HTTP method "PUT". It should use the HTTP method "POST".
  • C. The appropriate rule is updated with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.
  • D. A new rule is created with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.
Answer:

c

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 8

A security network engineer must implement intrusion policies using the Cisco Firepower Management Center API.
Which action does the engineer take to achieve the goal?

  • A. Make a PATCH request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.
  • B. Make a POST request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.
  • C. Intrusion policies can be read but not configured using the Cisco Firepower Management Center API.
  • D. Make a PUT request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.
Answer:

c

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 9

DRAG DROP Drag and drop the items to complete the curl request to the ThreatGRID API. The API call should request the first 10 IP addresses that ThreatGRID saw samples communicate with during analysis, in the first two hours of January 18
(UTC time), where those communications triggered a Behavior Indicator that had a th confidence equal to or higher than 75 and a severity equal to or higher than 95.
Select and Place:

Answer:


Reference:
https://support.umbrella.com/hc/en-us/articles/231248768-Cisco-Umbrella-Cisco-AMP-Threat-Grid-Cloud-Integration-Setup-Guide

Comments
Question 10

Which query parameter is required when using the reporting API of Cisco Security Management Appliances?

  • A. device_type
  • B. query_type
  • C. filterValue
  • D. startDate + endDate
Answer:

d

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Page 1 out of 6
Viewing questions 1-10 out of 56
Go To
page 2