SAUTO Practice Test 13 — 15 Questions

Question 1

When using the Cisco SecureX API, what is the purpose of the 'Application Name' field in the API client registration?

Accepted Answer

To identify the calling application for auditing.. When registering an API client in Cisco SecureX, the 'Application Name' field is a human-readable label that identifies the calling application. It is used for auditing, logging, and visibility so administrators can see which application made which API calls. It does not grant permissions or generate secrets — those are handled by other fields (scopes and client secret generation).

Answer

To define the API access scope.

Answer

To generate the Client Secret.

Answer

To set the API version.

Question 2

Which Cisco Secure Endpoint feature allows automated movement of hosts into different groups based on threat activity?

Accepted Answer

Dynamic Grouping. Dynamic Grouping in Cisco Secure Endpoint (formerly AMP for Endpoints) automatically moves hosts between groups based on criteria such as detected threat activity, hostname patterns, or OS version. This enables automated policy changes — for example, isolating a compromised host into a quarantine group with a stricter policy.

Answer

Static Grouping

Answer

Policy Assignment

Answer

Audit Logging

Question 3

Which TWO parameters are typically required for paginating through large result sets in the Secure Endpoint API?

Accepted Answer

offset. The Secure Endpoint API uses offset-based pagination, so option D (offset) is required to specify the starting position within the full result set from which records should be returned. Option E (limit) is also required to cap the number of records returned per page, which together with offset lets a client iterate through large result sets in fixed-size chunks. Options A (query), B (sort), and C (filter) are not pagination parameters: query and filter narrow which records match, and sort controls ordering, but none of them determine which page or how many records are returned, so they are not the two parameters needed for pagination.

Answer

query

Answer

sort

Answer

filter

Question 4

Which THREE metrics are commonly retrieved from the Cisco Secure Email (ESA) Reporting API to monitor mail flow health?

Accepted Answer

Total incoming messages. The Reporting API provides metrics such as incoming volume, spam rejection rates, and recipient statistics.

Answer

SSH login attempts

Answer

Appliance CPU temperature

Question 5

When performing an API audit, you want to ensure that all requests are logged. In Postman, which feature can you use to view the raw HTTP request and response details?

Accepted Answer

Postman Console. The Postman Console is the dedicated debugging tool that captures and displays the raw HTTP request and response details, including headers, body, status codes, and timing information for every request sent. It logs all network activity in real time, making it the correct feature for auditing whether requests are being logged and inspecting their exact wire format.

Answer

Runner

Answer

History tab

Answer

API Documentation

Question 6

You are writing a Python script using the requests library to retrieve configuration from a Cisco Firepower Management Center (FMC). Which specific header must be included in your request to ensure that the server returns the response in JSON format?

Accepted Answer

Accept: application/json. The Accept header tells the server what media type the client expects in the response. Setting Accept: application/json instructs the FMC REST API to return the payload in JSON format. Without it, the server may default to XML or another format. This is standard HTTP content negotiation per RFC 7231.

Answer

Content-Type: text/xml

Answer

Authorization: Bearer <token>

Answer

X-Auth-Token: <token>

Question 7

Which component of a REST API request is used to pass information about the requested resource in the URL?

Accepted Answer

Path parameters. Path parameters are embedded directly in the URL path and identify a specific resource — for example, /users/{id} where {id} is the path parameter. They are the standard REST mechanism for passing resource identifiers in the URL itself, distinguishing them from query strings, headers, and body content.

Answer

Cookies

Answer

Headers

Answer

Body

Question 8

You are using Postman to test an API that requires an API key in the header. Where should this be configured in Postman?

Accepted Answer

Headers tab. The Headers tab in Postman is where you configure custom HTTP headers, including API keys that must be sent in the request header (e.g., 'X-API-Key: abc123'). This is the correct location because API keys in headers are not part of the URL, body, or authorization framework.

Answer

Params tab

Answer

Body tab

Answer

Authorization tab

Question 9

You are automating policy updates for Cisco Umbrella using the Umbrella Management API. You need to identify the correct endpoint to retrieve the list of destination lists for a specific organization. Which HTTP method and path should you use?

Accepted Answer

GET /v1/organizations/{organizationId}/destinationlists. The Umbrella Management API exposes destination lists as a sub-resource of an organization, so the correct call is GET /v1/organizations/{organizationId}/destinationlists. GET is the HTTP verb used for read/retrieve operations, and the organizationId path parameter scopes the request to the correct tenant. This matches the documented Umbrella API pattern where all org-scoped resources are nested under /v1/organizations/{organizationId}/.

Answer

GET /v1/policies/destinationlists

Answer

POST /v1/organizations/{organizationId}/destinationlists

Answer

PUT /v1/organizations/{organizationId}/destinationlists

Question 10

Which TWO of the following are true regarding the 'requests' library's exception handling?

Accepted Answer

Timeout exceptions occur when the server takes too long to respond. Option D is correct because the requests library raises a Timeout exception (specifically ConnectTimeout or ReadTimeout, both subclasses of Timeout) when a server fails to respond within the specified timeout period, indicating the server is taking too long. Option E is correct because RequestException is the base class from which all other requests exceptions inherit, including ConnectionError, Timeout, HTTPError, TooManyRedirects, and JSONDecodeError, allowing a single except RequestException clause to catch any library-specific error. Option A is incorrect because requests does not ignore exceptions by default; errors such as connection failures or timeouts propagate unless explicitly caught. Option B is incorrect because JSONDecodeError is raised when response.json() fails to parse invalid JSON, not an HTTP request error (HTTP errors are represented by HTTPError via raise_for_status()). Option C is incorrect because ConnectionError is raised when a connection cannot be established, not for successful connections.

Answer

Exceptions are ignored by default

Answer

JSONDecodeError is an HTTP request error

Answer

ConnectionError is raised for successful connections

Question 11

You are using the Cisco Secure Endpoint (formerly AMP for Endpoints) API to query file trajectory data for a specific SHA-256 hash. The API returns a 429 Too Many Requests status code. What is the most efficient way to handle this in your automation script?

Accepted Answer

Implement an exponential backoff strategy with a retry logic.. HTTP 429 Too Many Requests means the client has exceeded the API's rate limit, and the correct, standards-aligned response is to back off and retry. Exponential backoff (e.g., wait 1s, 2s, 4s, 8s, with jitter) with retry logic prevents hammering the API, respects the server's Retry-After header when present, and lets the script eventually succeed once the window resets. This is the recommended pattern in Cisco's Secure Endpoint API documentation and in RFC 6585, which defines 429.

Answer

Switch from HTTPS to HTTP to reduce overhead.

Answer

Increase the API rate limit in the Cisco Secure Endpoint dashboard.

Answer

Force an authentication refresh on every request.

Question 12

Which THREE of the following are methods used in REST APIs? (Choose three)

Accepted Answer

POST. POST (A) is a standard REST API method used to create a new resource on the server, typically submitting data in the request body. GET (B) is a standard REST API method used to retrieve a representation of a resource without modifying server state. DELETE (C) is a standard REST API method used to remove a specified resource from the server. Together with PUT and PATCH, these form the core HTTP verbs defined for RESTful services. RUN (D) and SEND (E) are not HTTP methods and have no role in REST API semantics, so they are incorrect.

Answer

RUN

Answer

SEND

Question 13

Which TWO of the following are primary benefits of automating Cisco security policies via APIs? (Choose two)

Accepted Answer

Increased consistency of security posture. Option C is correct because automating security policies through APIs enforces a single, version-controlled definition of policy that is applied identically across all managed devices, so the security posture stays consistent rather than drifting between manual changes. Option E is correct because API-driven automation removes repetitive manual CLI entry, which is the main source of typos, wrong object groups, and misordered ACL/rule entries that cause configuration errors. Options A, B, and D are not benefits of API automation: APIs do not autonomously detect and remove all threats (that requires security controls such as IPS, AMP, or firewall inspection), they do not replace network engineers (they shift their work to designing and maintaining automation), and they do not eliminate physical firewalls (they configure and manage existing devices, whether physical or virtual).

Answer

Automatic removal of all security threats

Answer

Bypassing the need for network engineers

Answer

Elimination of physical firewalls

Question 14

Which TWO of the following are key features of the Cisco DevNet site? (Choose two)

Accepted Answer

Pre-configured API Sandboxes. Option D is correct because Cisco DevNet provides pre-configured API Sandboxes that let developers test Cisco APIs (such as DNA Center, Meraki, and Webex) against live or simulated environments without needing their own hardware. Option E is correct because DevNet offers Interactive Learning Labs, which are guided, hands-on environments for practicing coding, automation, and API integration skills directly in a browser. These two features reflect DevNet's core mission of enabling developers to learn, build, and test with Cisco platforms. Options A, B, and C are not DevNet features: DevNet does not provide legal advice for startups, does not act as a direct sales channel for Cisco gear, and does not offer hardware repair services.

Answer

Legal advice for startups

Answer

Direct sales of Cisco gear

Answer

Hardware repair service

Question 15

Which Python library is most commonly used for handling REST API requests in SecureX automation scripts?

Accepted Answer

requests. The 'requests' library is the de facto standard for making REST API calls in Python because it abstracts away the low-level complexity of HTTP into a simple, human-readable API (e.g., requests.get(url, headers=..., json=...)). SecureX automation scripts routinely use requests to authenticate against the SecureX/Cisco APIs, retrieve tokens, and parse JSON responses, making it the most common choice in orchestration playbooks.

Answer

flask

Answer

urllib

Answer

django