SAUTO Practice Test 5 — 10 Questions

Question 1

Which THREE of the following are common JSON data types?

Accepted Answer

number. JSON (JavaScript Object Notation, defined by RFC 8259) supports a fixed set of value types, and option A (number) is one of them: JSON numbers are written as decimal literals such as 42, -3.14, or 1.5e10, with no distinction between integers and floats. Option B (string) is correct because JSON strings are sequences of Unicode characters enclosed in double quotes, using backslash escapes like 
 and \uXXXX. Option D (boolean) is correct because JSON defines the literal values true and false as a native boolean type. The unmarked options do not belong: option C (class) is an object-oriented construct, not a JSON type — JSON only has objects (unordered key/value collections), not classes — and option E (pointer) is a memory-address concept from languages like C/C++, with no representation in the JSON specification.

Answer

class

Answer

pointer

Question 2

Your team runs a Cisco Secure Email Gateway (AsyncOS) and wants to automate message tracking lookups for incident response. A script authenticates with a valid session and queries /esa/api/v2.0/message-tracking/messages. The API returns HTTP 404 for every query even though messages exist. Which configuration issue is the most likely cause?

Accepted Answer

The ESA API feature is disabled or the wrong API version is enabled in the gateway configuration.. HTTP 404 from an AsyncOS API endpoint usually means the requested path is not exposed. The API feature must be enabled on the gateway, and the endpoint version in the URL must match the enabled version. Authentication failures produce 401, and empty data produces 200 with an empty result, so those do not fit the symptom.

Answer

The OAuth 2.0 token has expired and must be refreshed before retrying.

Answer

The message tracking database has been purged and no messages remain to query.

Answer

The API account lacks the Administrator or Operator role required for message tracking.

Question 3

When using the Cisco Umbrella Reporting API, which format is the default output for retrieving threat activity logs to ensure compatibility with most data analysis tools?

Accepted Answer

JSON. The Cisco Umbrella Reporting API returns JSON by default, which is the native format for most modern data analysis tools, SIEMs, and scripting languages. JSON's structure maps cleanly to Python dictionaries and JavaScript objects, making it the standard interchange format for API-driven log retrieval. XML, CSV, and binary are not the default output for Umbrella Reporting API responses.

Answer

XML

Answer

Binary

Answer

CSV

Question 4

Which THREE of the following are best practices for managing API keys? (Choose three)

Accepted Answer

Rotate keys regularly. Option A (Rotate keys regularly) is correct because periodic rotation limits the window of exposure if a key is leaked or compromised, and it supports compliance requirements such as those in PCI DSS and NIST guidelines. Option B (Use least privilege access for keys) is correct because scoping each key to only the permissions and resources it needs reduces the blast radius of a compromised key, following the principle of least privilege. Option C (Never hardcode keys in scripts) is correct because hardcoded keys end up in source control, logs, and build artifacts, where they are easily exposed; instead, keys should be stored in a secrets manager or injected via environment variables at runtime. Option D is wrong because reusing one key across every project violates least privilege and isolation, so a single leak compromises all projects and makes auditing impossible. Option E is wrong because email is unencrypted in transit and at rest on many servers, so sharing keys that way exposes them to interception and unauthorized access; keys should be distributed through a secure secrets management system.

Answer

Use the same key for every project

Answer

Share keys via email with the team

Question 5

You are configuring a CI/CD pipeline to deploy Cisco ASA firewall rules. Which step is essential to ensure the changes are correct before applying them to production?

Accepted Answer

Deploy to a sandbox or staging environment for validation.. Validating changes in a staging or pre-production environment is critical to ensure logic and syntax correctness.

Answer

Rely on automated rollback without testing.

Answer

Directly apply to production to save time.

Answer

Only test the API connectivity.

Question 6

Which TWO of the following are true regarding the use of the Python 'requests' library?

Accepted Answer

It can automatically serialize dictionaries to JSON via the json parameter.. Option B is correct because requests accepts a json= keyword argument on methods such as post(), put(), and patch(), which serializes a Python dictionary to a JSON body and automatically sets the Content-Type header to application/json. Option C is correct because the library's core purpose is to provide a high-level, human-friendly API for HTTP, exposing convenience methods like requests.get(), requests.post(), requests.put(), and requests.delete() that wrap urllib3 under the hood. Option A is not correct because requests is built on urllib3 and supports connection pooling and keep-alive, and while the base API is synchronous, it is not limited to a single execution model in the sense implied. Option D is not correct because requests manages connection pooling automatically via HTTPAdapter and urllib3's PoolManager, so manual pool management is not required. Option E is not correct because requests supports Python 3.x (and historically 2.7), not exclusively Python 2.7.

Answer

It only supports the synchronous execution model.

Answer

It requires manual management of connection pools.

Answer

It is only compatible with Python 2.7.

Question 7

Which Cisco security product uses the pxGrid framework to share contextual information with other network devices?

Accepted Answer

Cisco ISE. Cisco ISE (Identity Services Engine) is the primary platform that utilizes pxGrid to share identity and policy context across the network ecosystem.

Answer

Cisco Firepower

Answer

Cisco ASA

Answer

Cisco Umbrella

Question 8

When writing a Python request to the SecureX API, which Content-Type header is required for POST requests?

Accepted Answer

application/json. For POST requests to the SecureX API, the required Content-Type header is application/json. The SecureX API expects JSON-formatted request bodies, so the Content-Type must be set accordingly to ensure the server parses the payload correctly.

Answer

application/xml

Answer

application/x-www-form-urlencoded

Answer

text/plain

Question 9

An engineer is using NETCONF to retrieve configuration data from a Cisco IOS XE device. The engineer wants to filter the response to only include interface configuration for GigabitEthernet1. Which YANG filter correctly achieves this using the subtree filter?

Accepted Answer

GigabitEthernet1. The correct subtree filter includes the proper namespace for the ietf-interfaces module and follows the hierarchy: interfaces > interface > name. This ensures the NETCONF server correctly interprets the filter and returns only the configuration for GigabitEthernet1. Omitting the namespace or parent container leads to invalid filters and incorrect results.

Answer

GigabitEthernet1

Answer

GigabitEthernet1

Answer

Question 10

You are utilizing the Cisco ISE ERS API to provision a guest account. If the API returns a '409 Conflict', what is the most likely cause?

Accepted Answer

The account already exists.. In the Cisco ISE External RESTful Services (ERS) API, HTTP 409 Conflict indicates a resource conflict — most commonly that the object you are trying to create (e.g., a guest account with a given username) already exists in ISE. The correct handling is to detect the existing object, update it via PUT, or choose a unique identifier. This is standard REST semantics and ISE follows it for duplicate guest, endpoint, and identity-group creations.

Answer

The credentials provided are invalid.

Answer

The request body is malformed.

Answer

The API rate limit has been exceeded.