SAUTO Practice Test 2 — 10 Questions

Question 1

In the context of the Cisco Adaptive Security Appliance (ASA) REST API, what does a 'PATCH' method perform compared to a 'PUT' method?

Accepted Answer

PATCH updates only the specified fields, while PUT replaces the entire resource.. In REST APIs, PATCH is used for partial updates, modifying only the specified fields of a resource. PUT replaces the entire resource with the provided representation. The Cisco ASA REST API follows this standard, so PATCH updates only the given attributes, while PUT overwrites the whole object.

Answer

There is no difference; they are interchangeable.

Answer

PATCH creates a new resource, while PUT updates an existing one.

Answer

PATCH deletes the resource, while PUT updates it.

Question 2

Which Python library is the standard for performing HTTP requests in an automation script?

Accepted Answer

requests. The 'requests' library is the de facto standard for making HTTP requests in Python automation scripts because it provides a simple, human-friendly API that handles sessions, headers, authentication, JSON parsing, and connection pooling out of the box. It abstracts away the low-level complexity that the standard library requires.

Answer

http.client

Answer

socket

Answer

urllib

Question 3

You are automating the deletion of a sandbox report in Threat Grid. Which HTTP method should you use?

Accepted Answer

DELETE. The HTTP DELETE method is used to delete a specified resource. In the context of Threat Grid, deleting a sandbox report is a deletion operation, so the DELETE method is appropriate. The API endpoint for deleting a report would be called with DELETE.

Answer

GET

Answer

POST

Answer

PUT

Question 4

Which THREE of the following are true about the Cisco Umbrella API?

Accepted Answer

It requires an API Key and Secret. Option A is correct because the Cisco Umbrella API authenticates requests using an API Key and Secret, which are generated in the Umbrella dashboard and used to obtain an OAuth 2.0 token for API calls. Option B is correct because the Umbrella API follows REST principles, using standard HTTP methods (GET, POST, PUT, DELETE) and JSON-formatted requests and responses over HTTPS. Option E is correct because the Umbrella API provides both management capabilities (such as configuring policies, networks, and identities) and reporting capabilities (such as retrieving security activity and traffic reports). Option C is incorrect because the Umbrella API is available across multiple Umbrella packages and account types, not exclusively Enterprise accounts. Option D is incorrect because the Umbrella API is REST-based, not SOAP-based.

Answer

It is only available for Enterprise accounts

Answer

It is SOAP-based

Question 5

You are writing a Python script to retrieve interface statistics from a Cisco Firepower Management Center (FMC) using the REST API. When making the GET request, which header must be included to ensure the server understands the client prefers JSON format?

Accepted Answer

Accept: application/json. The Accept header is used by the client to specify the media types it is willing to receive in the response. By setting Accept: application/json, the client tells the FMC REST API that it prefers JSON-formatted data. This ensures the server returns JSON rather than XML or another format. The other headers serve different purposes: Content-Type describes the request body, X-Auth-Token is for authentication, and Authorization is for credentials.

Answer

Content-Type: application/json

Answer

X-Auth-Token: JSON

Answer

Authorization: Bearer

Question 6

You are automating Cisco ASA firewall rule updates using the REST API. Which data format is required in the request body when pushing a new access control entry?

Accepted Answer

JSON. The Cisco ASA REST API requires request bodies to be formatted in JSON (JavaScript Object Notation). When pushing a new access control entry (ACE), you must send a JSON payload that defines the ACE parameters, such as source, destination, and action. This is specified in Cisco's ASA REST API documentation, which mandates JSON for all API interactions.

Answer

YAML

Answer

XML

Answer

CSV

Question 7

You are automating the blocking of a specific URL on a Cisco WSA. You have verified the API reachability, but the rule is not being applied. What is the most common reason?

Accepted Answer

The configuration change was not committed. On Cisco WSA, API-driven configuration changes are staged and do not take effect until a commit is performed. If the API call succeeds but the change is not committed, the rule will not be applied to live traffic — this is the most common reason for 'API reachable but rule not applied' scenarios.

Answer

The URL is already in the global whitelist

Answer

The WSA needs a reboot

Answer

The API user does not have 'Admin' privileges

Question 8

Which THREE components are required to configure an API client for Cisco SecureX?

Accepted Answer

API Scope. To configure an API client for Cisco SecureX, you must supply the OAuth 2.0 credentials that SecureX generates when the client is created: the Client ID (E), which uniquely identifies the API client, the Client Secret (D), which authenticates that client, and the API Scope (C), which defines the specific permissions or resources the client may access. These three values are used together in the token request to obtain an access token for calling SecureX APIs. A Device Serial Number (A) is not part of API client authentication; it is hardware-identifying information used for device licensing and support, not for OAuth client credentials. A User Password (B) is likewise not required, because SecureX API clients authenticate with the generated client credentials rather than a user's account password.

Answer

Device Serial Number

Answer

User Password

Question 9

When using the Umbrella API to create a new 'Domain' block rule, you need to specify the 'type'. Which of the following is a valid type?

Accepted Answer

domain. In the Umbrella API, when creating a block rule for a domain, the 'type' field must be set to 'domain'. This indicates that the rule applies to a specific domain name, such as 'example.com'. Other types like 'url' or 'ip_address' are not valid for domain-based rules; they would be used for different rule categories. The 'category' type is used for content category rules, not for individual domain blocks.

Answer

url

Answer