SAUTO Practice Test 10 — 10 Questions

Question 1

When interacting with the Cisco ISE ERS API, you receive an HTTP 401 error. What is the most likely cause?

Accepted Answer

Authentication credentials provided are incorrect.. An HTTP 401 Unauthorized response indicates that the request lacks valid authentication credentials for the target resource. When interacting with the Cisco ISE ERS (External RESTful Services) API, the most likely cause is that the username, password, or authentication token provided is incorrect or missing. The ERS API requires valid credentials with appropriate RBAC permissions to authenticate each request.

Answer

The ERS API service is disabled on the ISE node.

Answer

The request body contains invalid JSON.

Answer

The resource does not exist.

Question 2

You are automating Cisco Umbrella policy changes. You wish to update an existing policy to use a new 'Content Settings' object. Which HTTP header is required in your request to ensure the update follows optimistic concurrency control?

Accepted Answer

If-Match. The If-Match header is used for optimistic concurrency control in HTTP. When updating a resource, the client includes the ETag value of the resource it last retrieved. The server compares this value with the current ETag; if they match, the update proceeds, preventing lost updates from concurrent modifications. In Cisco Umbrella's API, this ensures that policy changes are applied only if the policy hasn't been altered since the client's last read.

Answer

Authorization

Answer

X-Transaction-ID

Answer

Content-Type

Question 3

What is the primary function of the Cisco Secure Email API 'Message Tracking' interface?

Accepted Answer

Searching and retrieving email metadata. The Cisco Secure Email API 'Message Tracking' interface is designed to provide visibility into email flow by allowing administrators to search for and retrieve metadata about messages processed by the email security appliance. This includes details such as sender, recipient, subject, timestamp, and delivery status, which are essential for troubleshooting and auditing. It does not perform configuration or management functions like setting SMTP relays or creating mailboxes.

Answer

Configuring SMTP relay settings

Answer

Creating user mailboxes

Answer

Updating system firmware

Question 4

Which TWO of the following are characteristics of the Cisco ISE ERS API? (Choose two)

Accepted Answer

It supports CRUD (Create, Read, Update, Delete) operations. Option B is correct because the Cisco ISE External RESTful Services (ERS) API is designed to let administrators programmatically perform Create, Read, Update, and Delete (CRUD) operations against ISE resources such as endpoints, identity groups, and network devices. Option E is correct because ERS is built on RESTful principles, using standard HTTP methods (GET, POST, PUT, DELETE) over HTTPS with XML or JSON payloads to interact with ISE. Option A is incorrect because ERS uses standard HTTP/HTTPS rather than a proprietary binary protocol. Option C is incorrect because ERS is an API for programmatic access, not a CLI interface. Option D is incorrect because ERS works with ISE deployments including virtual appliances, not only physical appliances.

Answer

It requires a proprietary binary protocol

Answer

It is purely for CLI access

Answer

It only works with physical appliances

Question 5

In a YANG model, which statement is used to define an operational constraint that must be true for the data to be valid?

Accepted Answer

must. In YANG, the 'must' statement defines a constraint expression that must evaluate to true for the data to be considered valid — it is used to enforce semantic/operational rules beyond simple type checking. For example, 'must "../type = 'vlan'"' ensures a dependent leaf has a specific value.

Answer

mandatory

Answer

typedef

Answer

config

Question 6

Which Python library is most commonly used in Cisco security automation scripts to interact with REST APIs?

Accepted Answer

requests. The Python 'requests' library is the de facto standard for making HTTP/HTTPS requests in Python, including GET, POST, PUT, and DELETE calls to REST APIs. Cisco security automation scripts overwhelmingly use requests to authenticate and interact with APIs such as Secure Endpoint, Umbrella, and Firepower.

Answer

beautifulsoup

Answer

scapy

Answer

pandas

Question 7

When working with Cisco Firepower API, what is the role of the 'ETag' header in an API response?

Accepted Answer

To manage optimistic concurrency.. The ETag (Entity Tag) is used for optimistic concurrency control to ensure that an update is only applied if the resource has not changed since it was last retrieved.

Answer

To cache the response.

Answer

To authenticate the response.

Answer

To track the API version.

Question 8

Which THREE of the following are true about Cisco API rate limiting?

Accepted Answer

Headers may include quota information. Option A is correct because Cisco API responses commonly return rate-limit headers such as X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset, which expose quota information to the client. Option D is correct because rate limiting protects backend API infrastructure from being overwhelmed, thereby ensuring service stability and fair resource allocation across consumers. Option E is correct because exceeding the allowed request rate typically triggers an HTTP 429 'Too Many Requests' response, often accompanied by a Retry-After header. Option B is incorrect because rate limiting applies to all HTTP methods, including POST, PUT, PATCH, and DELETE, not just GET. Option C is incorrect because rate limiting normally throttles or temporarily blocks requests rather than permanently banning the account.

Answer

It is only applicable to GET requests

Answer

It always results in the account being banned

Question 9

Which THREE of the following are common benefits of using NETCONF for device management?

Accepted Answer

Structured data format (XML). NETCONF is a standardized network management protocol that uses XML-encoded messages, so option A is correct because its structured XML data format enables machine-readable, schema-validated configuration and state data that is easy to parse and automate. Option C is correct because NETCONF supports transaction-based configuration commits, allowing changes to be applied atomically with commit, confirm-commit, and rollback capabilities so a failed change does not leave the device in a partial state. Option D is correct because NETCONF logically separates datastores such as running, candidate, startup, and intended, which lets operators stage, validate, and roll back configurations independently of the active running configuration. Option B is not a NETCONF benefit because NETCONF is a programmatic protocol and does not provide native GUI rendering, and option E is unrelated since NETCONF is designed for configuration and state management, not real-time video streaming.

Answer

Native GUI rendering

Answer

Real-time video streaming support

Question 10

An engineer is automating Cisco Identity Services Engine (ISE) using the External RESTful Services (ERS) API. After creating a new endpoint group with a POST request, the engineer wants to verify the group was created and retrieve its unique identifier. Which HTTP method and endpoint should be used to retrieve the details of the newly created endpoint group?

Accepted Answer

GET /ers/config/endpointgroup/{id}. The correct approach is to use a GET request to the specific endpoint group resource by ID. This retrieves the group's details and confirms its creation. The other methods either create, update, or delete the resource, which are not appropriate for verification. The ERS API follows REST conventions, so GET is the standard for reading.

Answer

PUT /ers/config/endpointgroup/{id}

Answer

DELETE /ers/config/endpointgroup/{id}

Answer

POST /ers/config/endpointgroup/{id}