SAUTO Practice Test 4 — 10 Questions

Question 1

You are developing a Python script that uses the ncclient library to configure a Cisco IOS-XE device via NETCONF. You need to send a <edit-config> operation that merges a new interface configuration. Which NETCONF operation and default-operation value should you use to ensure that only the specified configuration is merged without affecting other interfaces?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use with default-operation='merge'.. The operation with default-operation='merge' is the standard way to merge configuration changes without affecting other parts of the configuration. It modifies only the specified nodes. The 'replace' option would overwrite the entire configuration, while 'none' requires explicit operation attributes. is for full datastore replacement.

Answer

Use <edit-config> with default-operation='replace'.

Answer

Use <copy-config> with the running configuration as the target.

Answer

Use <edit-config> with default-operation='none'.

Question 2

You are automating the addition of an IP blocklist in Umbrella. You have the IP address and the list ID. Which HTTP method and path is correct?

Accepted Answer

POST /v1/destinationlists/{listId}/destinations. The Umbrella API uses POST to add destinations to an existing destination list. The correct endpoint is /v1/destinationlists/{listId}/destinations, where {listId} is the ID of the target list. POST is the standard HTTP method for creating or appending resources, which matches the action of adding IPs to a blocklist.

Answer

GET /v1/destinationlists/{listId}

Answer

PUT /v1/destinationlists/{listId}/destinations

Answer

PATCH /v1/destinationlists/{listId}

Question 3

Which YANG node type is used specifically to group reusable definitions that can be imported by other modules?

Accepted Answer

grouping. A grouping in YANG is a reusable collection of nodes (leaves, containers, lists) that can be referenced with the uses statement, either within the same module or imported from another module. It exists specifically to avoid duplicating common configuration structures across multiple parts of a model.

Answer

typedef

Answer

leaf

Answer

container

Question 4

Which of the following is a key requirement for using the Cisco Umbrella API successfully?

Accepted Answer

API Key and Secret generated in the dashboard. The Cisco Umbrella API requires an API Key and Secret generated from the Umbrella dashboard to authenticate requests. These credentials are used to obtain tokens for programmatic access to Umbrella's reporting, enforcement, and management endpoints. Without them, API calls cannot be authenticated.

Answer

Root access to the DNS server

Answer

A valid SNMP community string

Answer

A physical connection to the Cisco cloud data center

Question 5

You are integrating Cisco Umbrella with your SIEM using the Umbrella Reporting API. Which authentication mechanism is required to access the Reporting API endpoints?

Accepted Answer

API Key and Secret to obtain a Bearer Token. The Umbrella Reporting API requires an API Key and Secret, which are exchanged for a Bearer Token used to authenticate subsequent requests. This OAuth-style flow is documented by Cisco for programmatic access to reporting endpoints. The token is then passed in the Authorization header.

Answer

Username and password in the HTTP header

Answer

Shared pre-shared key (PSK)

Answer

Client certificate-based authentication only

Question 6

You are automating Cisco Identity Services Engine (ISE) using the External RESTful Services (ERS) API. Your Python script needs to query all network devices and then update a specific device group. After authenticating with HTTPS Basic Authentication, you receive an HTTP 401 response when attempting to retrieve devices. Which action should you take to resolve this?

Accepted Answer

Include the 'ERS-Read-Only' or 'ERS-Admin' role in the API user's admin group and ensure the account is not disabled.. A 401 Unauthorized response from the Cisco ISE ERS API indicates that the provided credentials are not accepted or the account lacks necessary permissions. The ERS API requires the API user to be assigned to an admin group with ERS-Admin or ERS-Read-Only roles. Ensuring the account is active and has the correct role resolves the authentication failure.

Answer

Disable SSL certificate verification in your Python script to allow the connection to proceed.

Answer

Change the HTTP method from GET to POST and include a JSON body with the device details.

Answer

Add the 'Accept: application/json' header to the request to ensure the server returns JSON instead of XML.

Question 7

You are writing a script to automate firewall rules. When using the 'pyang' tool, what is the primary purpose of the '--format' option?

Accepted Answer

To translate the YANG model into a specific output format.. The --format option in pyang is used to specify the output format, such as tree, json, or xsd, for a given YANG model.

Answer

To set the recursion depth of the model tree.

Answer

To define the input file encoding.

Answer

To specify the YANG module version.

Question 8

When using NETCONF to manage a Cisco device, which message type is used to establish the initial session and exchange capability information?

Accepted Answer

. NETCONF sessions begin with a message exchanged by both the client and the server. The contains the session ID and a element listing supported YANG modules and protocol features, allowing both sides to negotiate what operations and data models are available before any configuration is attempted.

Answer

<rpc>

Answer

<ok>

Answer

<rpc-reply>

Question 9

In a Cisco REST API implementation using Python, you receive a '429 Too Many Requests' error. What is the appropriate programmatic response?

Accepted Answer

Implement an exponential backoff strategy.. A 429 Too Many Requests status code indicates that the client has exceeded the rate limit imposed by the API server. The correct programmatic response is to implement an exponential backoff strategy, where the client waits progressively longer intervals between retries (e.g., 1s, 2s, 4s, 8s) to reduce the request rate and avoid overwhelming the server. This approach is a standard best practice for handling rate limiting in REST APIs, including Cisco's, and is often recommended in Cisco DevNet and automation certifications.

Answer

Switch the request method from GET to POST.

Answer

Disable SSL verification for subsequent calls.

Answer

Increase the timeout duration of the request.

Question 10

Which Cisco tool is best suited for centralizing the management of security APIs across multiple platforms?

Accepted Answer

Cisco SecureX Orchestration. Cisco SecureX Orchestration is the platform designed to centralize, build, and run workflows that call security APIs across multiple Cisco and third-party products. It provides a visual workflow editor, prebuilt activities, and connectors so teams can orchestrate responses across FMC, Umbrella, Secure Endpoint, ISE, and more from a single place.

Answer

Cisco FMC

Answer

Cisco ISE

Answer

Cisco Umbrella