SAUTO Practice Test 17 — 15 Questions

Question 1

Which Python construct is best for iterating over a list of IP addresses returned by an API call?

Accepted Answer

for loop. The 'for' loop is the standard Python construct for iterating over collections like lists.

Answer

if statement

Answer

while loop

Answer

try-except block

Question 2

In the context of REST APIs, which status code indicates that a request was successful and a new resource was created on the server?

Accepted Answer

201 Created. HTTP 201 Created is the standard response code for a successful POST request that results in a resource creation.

Answer

200 OK

Answer

202 Accepted

Answer

204 No Content

Question 3

Which data format is primarily used by REST APIs and is considered the standard for programmatic device interaction in Cisco security environments?

Accepted Answer

JSON. JSON (JavaScript Object Notation) is the lightweight, human-readable format preferred by modern REST APIs.

Answer

YAML

Answer

XML

Answer

Binary

Question 4

You are automating the addition of malicious URLs to a Cisco Umbrella destination list. After sending a POST request with the new domains, you receive a '409 Conflict' error. What is the likely cause?

Accepted Answer

The domain already exists in the destination list. A 409 Conflict error in REST APIs indicates that the request conflicts with the current state of the target resource. In the context of Cisco Umbrella destination lists, attempting to add a domain that already exists in the list triggers this error because the API enforces uniqueness. The correct approach is to check for existing entries or handle the conflict gracefully.

Answer

The destination list limit has been reached

Answer

The API Key has expired

Answer

The domain format is invalid

Question 5

You are automating Cisco Cloudlock incident retrieval with a Python script. The script must authenticate and then fetch incidents filtered by severity. Which two elements are required to build a valid Cloudlock API request for this purpose? (Choose two.)

Accepted Answer

A query parameter or filter that specifies the severity value, such as severity=High.. A valid Cloudlock incident retrieval request needs authentication via an OAuth 2.0 bearer token in the Authorization header, plus a filter that narrows results to the desired severity. Together these satisfy the script's goal of fetching only matching incidents. SOAP, GraphQL, and path-based API keys are not part of the Cloudlock REST API model.

Answer

A SOAP envelope with a WS-Security header containing the Cloudlock username and password.

Answer

A GraphQL query document posted to the Cloudlock incidents endpoint.

Answer

An API key embedded in the URL path, with no Authorization header.

Question 6

You are automating Cisco Adaptive Security Appliance (ASA) configurations using NETCONF. Which protocol data store should you target to ensure your changes take effect immediately in the running configuration?

Accepted Answer

running. In NETCONF, the 'running' data store represents the currently active configuration on the device.

Answer

intended

Answer

candidate

Answer

operational

Answer

startup

Question 7

You need to retrieve the current status of all Cisco Umbrella 'Virtual Appliances' using the API. Which API resource is the most appropriate?

Accepted Answer

Virtual Appliances endpoint. The Virtual Appliances endpoint is specifically designed to retrieve status and information about Umbrella Virtual Appliances. It returns details such as appliance name, status, last sync time, and associated sites. This is the correct resource for querying VA health and state.

Answer

Networks endpoint

Answer

Policies endpoint

Answer

Roaming Computers endpoint

Question 8

When using the Cisco ISE REST API, what does the 'ERAS' (External RESTful Services) framework provide?

Accepted Answer

CRUD operations on ISE resources via REST.. ERAS enables external applications to perform CRUD operations on ISE resources like endpoints and policies.

Answer

Encrypted SSH tunneling for CLI.

Answer

Automated firmware updates.

Answer

Real-time threat intelligence feeds.

Question 9

Which TWO of the following steps are involved in the Cisco Firepower API authentication workflow? (Choose two)

Accepted Answer

Extracting the 'X-Auth-Access-Token' from the response. The Cisco Firepower Management Center (FMC) REST API authentication workflow begins by sending a POST request to the /api/fmc_platform/v1/auth/generatetoken endpoint with valid credentials (typically HTTP Basic Auth), which is exactly what option E describes. The FMC then returns a response containing the authentication token in the X-Auth-Access-Token header (along with a refresh token), so option B correctly identifies extracting that token from the response as the next step; this token is then used in the X-Auth-Access-Token header of subsequent API calls. Option A is incorrect because restarting FMC services is a troubleshooting action, not part of API authentication. Option C is incorrect because there is no DELETE request to clear a cache in the authentication workflow; token revocation uses a different mechanism. Option D is incorrect because SNMP v3 traps are for network monitoring and have no role in FMC API authentication.

Answer

Restarting the FMC services

Answer

Sending a DELETE request to clear the cache

Answer

Configuring an SNMP v3 trap

Question 10

You are designing a YANG model for a custom security policy. Which statement accurately describes the function of a 'leaf' node in YANG?

Accepted Answer

It contains a single value and no child nodes.. In YANG, a leaf node represents a single scalar value such as a string, integer, or boolean, and it cannot have child nodes. It is the basic building block for defining data attributes in a model, analogous to a variable or field.

Answer

It defines a list of instances.

Answer

It acts as a container for other nodes.

Answer

It defines a choice between multiple alternatives.

Question 11

A network security engineer is using Ansible to automate configuration of Cisco ASA firewalls. The engineer needs to ensure that the playbook can handle authentication to the ASA devices securely without hardcoding credentials. Which Ansible feature should be used to store and retrieve the ASA credentials?

Accepted Answer

Ansible Vault. Ansible Vault is designed to encrypt sensitive data, including credentials. By storing ASA credentials in a Vault-encrypted file, the playbook can securely retrieve them without exposing them in plaintext. Other options either lack encryption or are not intended for secret storage. Vault is the standard secure solution for Ansible.

Answer

Environment variables

Answer

Inventory file in plaintext

Answer

Ansible facts

Question 12

You are automating Firepower Management Center event retrieval. You notice your script is getting an HTTP 429 response. What should your automation script implement?

Accepted Answer

Implement an exponential backoff algorithm. An HTTP 429 'Too Many Requests' error indicates rate-limiting. A robust script must implement exponential backoff to respect the API rate limits.

Answer

Switch to a different API key

Answer

Increase the timeout interval

Answer

Disable the API logging on the device

Question 13

Which THREE of the following are valid HTTP methods supported by REST APIs for managing network configurations?

Accepted Answer

DELETE. GET (E) is correct because it is the standard HTTP method for retrieving or reading network configuration resources from a REST API without modifying them. POST (D) is correct because it is used to create new configuration resources or submit data to the server for processing. DELETE (A) is correct because it removes an existing network configuration resource identified by its URI. TRACE (B) is not a REST resource-management method; it is a diagnostic method that echoes the received request back to the client. CONNECT (C) is also not used for managing configurations; it establishes a tunnel to a server, typically for HTTPS through a proxy.

Answer

TRACE

Answer

CONNECT

Question 14

How do you retrieve the API credentials for Cisco Secure Endpoint?

Accepted Answer

In the 'Settings' -> 'API Credentials' menu. Cisco Secure Endpoint API credentials (a 3rd-party API client with a Client ID and API Key) are generated from the management console under Settings (gear icon) -> API Credentials. From there an administrator creates a new API credential, assigns a scope/role, and receives the Client ID and API Key used for Basic authentication to the API. This is the only supported location for creating and retrieving these credentials.

Answer

In the 'Devices' -> 'Hosts' menu

Answer

In the 'Policies' -> 'General' menu

Answer

In the 'User Management' -> 'Accounts' menu

Question 15

Which JSON-related error occurs if you try to parse a string that is missing a closing brace?

Accepted Answer

JSONDecodeError. JSONDecodeError is the specific exception raised by Python's json module when parsing invalid JSON, such as a string missing a closing brace. It is a subclass of ValueError and provides detailed information about the error location.

Answer

ValueError

Answer

SyntaxError

Answer

TypeError