You must be able to identify Cisco Security API documentation types, use DevNet sandboxes correctly, and send properly formatted JSON to the ASA REST API for firewall rule changes. Getting the request body format and authentication right is most important.
Start practicing
Network Security — choose a session length
Free · No account required
Domain overview
This domain covers programmatic interaction with Cisco security platforms: ASA REST API access rules, Firepower/FMC and Umbrella APIs, and DevNet sandbox usage. Questions test API documentation types, request payload formats, authentication, and secure design principles when automating firewall and policy changes across Cisco security products.
Exam objectives
Cisco ASA REST API access control entry payloads and required JSON body format
Cisco DevNet sandbox purpose for testing security APIs without production impact
Types of Cisco Security API documentation including Swagger/OpenAPI and DevNet references
Secure network design principles for API authentication, authorization, and encrypted transport
Assuming ASA REST API accepts XML or form-encoded bodies when JSON is required for access control entries
Confusing DevNet sandbox with production environments, missing that sandboxes are isolated test instances
Overlooking authentication token handling and HTTPS requirements, treating API calls as unauthenticated requests
Click any question to see the full explanation and answer options, or start a focused practice session above.
A network engineer is using the Cisco Firepower Management Center (FMC) API to retrieve access control policy information. Which HTTP method should be used to perform a read-only request for a specific policy resource?
2You are configuring a Cisco ISE external RESTful service (ERS) integration. You need to update the status of a guest user. Which HTTP method and resource URI structure is correct?
3You are using the Cisco Firepower Management Center (FMC) API to retrieve a list of Access Control Policies. Which URL endpoint is correct?
4You are automating Cisco Firepower Management Center (FMC) object creation using the REST API. You successfully POST a new network object, but the changes do not appear on the managed Firepower Threat Defense (FTD) device. What is the mandatory final step to ensure the changes take effect?
5Which TWO steps are required to properly authenticate to the Cisco Firepower Management Center (FMC) API using the REST API Explorer?
6You are automating Cisco Firepower Management Center (FMC) via the REST API. You need to update an existing object. Which HTTP method must you use to ensure a full update of the resource representation?
7You are configuring an Ansible playbook to manage Cisco Firepower policies. Which module is specifically designed to interact with FMC objects?
8When using the FMC API, what is the purpose of the 'X-Auth-Access-Token' header?
9You are troubleshooting a Python script using the Cisco pxGrid API. The script fails to receive notifications from ISE. Which component must be verified first?
10When interacting with the Cisco ISE ERS API, you receive an HTTP 401 error. What is the most likely cause?
11You are automating Cisco ASA firewall rule updates using the REST API. Which data format is required in the request body when pushing a new access control entry?
12When automating Cisco Stealthwatch (Secure Network Analytics) alerts, which API endpoint is used to query flow data?
13You are writing a script to parse FMC API response data. The response is a nested JSON object. Which Python library is standard for handling this task?
14Which authentication method is most commonly used by Cisco SecureX for API access?
15When automating Cisco Security solutions, what is the primary benefit of using a 'Service Account' instead of a personal user account for API authentication?
16In a Cisco security automation environment, what does the 'API Rate Limit' represent?
17A script needs to update a Cisco Firepower object. Which API workflow is correct?
18Which protocol is primarily used for the transport of API calls in the Cisco security portfolio?
19When using the Cisco SecureX API, what is the purpose of the 'Application Name' field in the API client registration?
20What is the primary function of an API 'sandbox' in Cisco DevNet?
21Which Cisco security product API supports 'Bulk' operations to improve efficiency when modifying large numbers of objects?
22In Python, which HTTP library is most recommended for interacting with Cisco Security APIs due to its simplicity and features?
23When automating threat hunting with the Cisco SecureX Threat Response API, which object type is commonly used as a search parameter?
24When working with Cisco Firepower API, what is the role of the 'ETag' header in an API response?
25You are configuring a CI/CD pipeline to deploy Cisco ASA firewall rules. Which step is essential to ensure the changes are correct before applying them to production?
26You are utilizing the Cisco ISE ERS API to provision a guest account. If the API returns a '409 Conflict', what is the most likely cause?
27What does the 'Authorization' header in a REST API call carry?
28Which Cisco security component provides visibility and control over cloud-based threats?
29Which Cisco tool is best suited for centralizing the management of security APIs across multiple platforms?
30When using the Cisco ISE ERS API, what is the impact of not specifying the 'Accept' header in your request?
31Which programming language is most commonly used for Cisco Security automation tasks?
32When automating Cisco Stealthwatch, which authentication type is utilized for the API?
33In the context of the Cisco Firepower API, what does a 'GET' request to '/api/fmc_config/v1/domain/{domainUUID}/policy/accesspolicies' return?
34When automating security, which methodology is used to treat infrastructure configurations as code?
35You are running a script that interacts with the Cisco ISE ERS API. The script is designed to perform a bulk import of users. Which HTTP code should you expect for a successful creation request?
36What is the primary function of a 'Bearer Token' in an API request?
37Which TWO of the following are valid ways to test Cisco APIs before deployment? (Choose two)
38Which element in an API request is most often used to filter the amount of data returned?
39Which THREE of the following fields are commonly found in a JSON API response object? (Choose three)
40Which TWO of the following are primary benefits of automating Cisco security policies via APIs? (Choose two)
41Which THREE of the following are common issues encountered when automating Cisco Security APIs? (Choose three)
42Which TWO of the following steps are involved in the Cisco Firepower API authentication workflow? (Choose two)
43Which TWO of the following are characteristics of the Cisco ISE ERS API? (Choose two)
44Which THREE of the following are key considerations when designing an automated security script? (Choose three)
45Which TWO of the following are true about Cisco Firepower API? (Choose two)
46Which TWO of the following are types of Cisco Security API documentation? (Choose two)
47Which THREE of the following are best practices for managing API keys? (Choose three)
48Which TWO of the following are components of a URL? (Choose two)
49Which THREE of the following are methods used in REST APIs? (Choose three)
50Which TWO of the following are key features of the Cisco DevNet site? (Choose two)
51You are using the Cisco ASA REST API to retrieve the current status of an interface. Which HTTP method should be used to perform this read operation?
52You are automating Firepower Management Center (FMC) object creation using the REST API. You send a POST request to /api/fmc_config/v1/domain/{domainUUID}/object/networkaddresses with a body containing a name and type. The request returns a 400 Bad Request error. What is the most likely cause?
53Which Cisco security product uses the pxGrid framework to share contextual information with other network devices?
54You are automating threat response using Cisco Threat Response. You want to retrieve a list of verdicts for a specific observable (e.g., an IP address). Which API provides this capability?
55When using the Cisco Umbrella Reporting API, what is the default limit for the number of records returned in a single GET request?
56You are performing a bulk update of Security Group Tags (SGTs) in Cisco ISE. Which mechanism should you prioritize to minimize load on the API when processing thousands of tags?
57Which Python library is the industry standard for sending HTTP requests to Cisco security APIs?
58In the context of the Cisco ASA REST API, what is the role of the 'ETag' header in an API response?
59You are automating Firepower Management Center event retrieval. You notice your script is getting an HTTP 429 response. What should your automation script implement?
60Which Cisco technology allows you to automate the distribution of Indicators of Compromise (IoCs) across the security stack?
61When designing secure network automation, which practice is considered the most critical for API credentials?
62Which THREE of the following are core principles of Secure Network Design when using APIs?
63Which TWO of the following are valid methods for interacting with Cisco ISE programmatically?
64Which TWO of the following are true regarding the Cisco Firepower Management Center (FMC) API?
65Which TWO components are typically required to initiate a connection to the Cisco Umbrella API?
66Which THREE of the following actions can be automated via the Cisco ASA REST API?
67An engineer is automating Cisco Identity Services Engine (ISE) using the External RESTful Services (ERS) API. After creating a new endpoint group with a POST request, the engineer wants to verify the group was created and retrieve its unique identifier. Which HTTP method and endpoint should be used to retrieve the details of the newly created endpoint group?
68You are automating Cisco Identity Services Engine (ISE) using the External RESTful Services (ERS) API. Your Python script needs to query all network devices and then update a specific device group. After authenticating with HTTPS Basic Authentication, you receive an HTTP 401 response when attempting to retrieve devices. Which action should you take to resolve this?
69A security engineer is automating Cisco Firepower Management Center (FMC) using its REST API. The script must create a new access control policy and then deploy it to managed devices. After creating the policy, the engineer attempts to deploy it but receives an HTTP 400 error stating 'Deployment failed: policy not associated with any device.' What is the most likely cause?
70You are developing a Python script to automate Cisco Umbrella enforcement of security policies. The script must retrieve the list of identities and then apply a block action to a specific domain. Which API endpoint and method should you use to apply the block action?
71You are automating the deployment of Cisco ASA firewall rules using the ASA REST API. You need to ensure that the API calls are secure and that changes are properly applied. Which two practices are essential for secure and successful automation? (Choose two.)
72A network security engineer is using Ansible to automate configuration of Cisco ASA firewalls. The engineer needs to ensure that the playbook can handle authentication to the ASA devices securely without hardcoding credentials. Which Ansible feature should be used to store and retrieve the ASA credentials?
73A network security engineer is writing a Python script to interact with the Cisco Identity Services Engine (ISE) External RESTful Services (ERS) API. The script must create a new endpoint and then retrieve its details. Which HTTP status code should the script expect upon successful creation of the endpoint?
74A security automation engineer is writing a Python script that uses the Cisco Firepower Management Center (FMC) REST API to modify an existing access control policy. The script must first obtain the current policy object, change its default action, and then submit the update. Which HTTP method and endpoint pattern should the script use to apply the change to the existing policy?
75A security engineer is automating Cisco Identity Services Engine (ISE) using the REST API. The script must retrieve a list of all network devices configured in ISE. Which API endpoint should the engineer use?
You must be able to identify Cisco Security API documentation types, use DevNet sandboxes correctly, and send properly formatted JSON to the ASA REST API for firewall rule changes. Getting the request body format and authentication right is most important.
The Courseiva SAUTO question bank contains 75 questions in the Network Security domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Network Security domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included