SAUTO Practice Test 5 — 10 Questions

Question 1

When designing an automation workflow using Postman, which feature allows you to dynamically pass a value from the response of one request to the input of a subsequent request?

Accepted Answer

Collection Variables. Postman variables (specifically collection or environment variables) are updated via the 'Tests' tab using scripting to chain requests.

Answer

Pre-request Scripts

Answer

Mock Servers

Answer

Request Headers

Question 2

In the context of NETCONF, which capability allows a client to explicitly lock the datastore to prevent other users from making changes?

Accepted Answer

urn:ietf:params:netconf:capability:candidate:1.0. The :candidate capability allows the use of the <lock> operation to ensure exclusive configuration access.

Answer

urn:ietf:params:netconf:capability:rollback

Answer

urn:ietf:params:netconf:capability:exclusive-access

Answer

urn:ietf:params:netconf:capability:write-only

Question 3

When working with Cisco security APIs, which authentication mechanism is most commonly required to maintain a session after the initial credentials have been exchanged?

Accepted Answer

Bearer Token. Modern Cisco security APIs use tokens (like Bearer tokens) to maintain authorization for subsequent requests without requiring repeated full credential exchanges.

Answer

SSH Public Key

Answer

IP Whitelisting

Answer

Basic Auth

Question 4

Which Python library is most commonly used for handling REST API requests in SecureX automation scripts?

Accepted Answer

requests. The 'requests' library is the standard for handling HTTP operations in Python.

Answer

flask

Answer

urllib

Answer

django

Question 5

When using the Umbrella Investigate API, what does the 'co-occurrences' result represent?

Accepted Answer

Domains accessed in the same timeframe. Co-occurrences identify domains that are frequently visited together in short timeframes, often indicating related infrastructure.

Answer

The block rate of a policy

Answer

Malware infection rate

Answer

The number of users on a network

Question 6

You are automating a threat hunt using SecureX. Which API response field confirms that an observable is malicious?

Accepted Answer

disposition. The 'disposition' field uses integer values to represent threat levels, where 3 typically indicates malicious.

Answer

malware_score

Answer

threat_level

Answer

status_code

Question 7

When investigating an IP address in Cisco SecureX, which TWO pieces of intelligence data are typically provided by the Threat Intelligence API?

Accepted Answer

Sightings. The Threat Intelligence API provides observable disposition and sightings information.

Answer

Network topology

Answer

User password hash

Answer

Hardware specs

Question 8

When managing Cisco Umbrella policies, which TWO types of destination lists can you create via the API?

Accepted Answer

Block list. Umbrella supports allow and block destination lists via the API.

Answer

Guest list

Answer

Warning list

Answer

Quarantine list

Question 9

Which THREE factors influence the rate limit for Cisco Security APIs?

Accepted Answer

Subscription tier. Rate limits are typically determined by the subscription tier, endpoint, and user/org context.

Answer

Hardware version

Answer

Browser type

Question 10

When automating threat hunting with Cisco SecureX, which object type is used to represent an observable that has been aggregated from multiple sources?

Accepted Answer

Observable. In the SecureX Threat Intelligence API, an 'observable' is the base object used for tracking indicators like IPs, domains, or hashes across different security tools.

Answer

Threat-Actor

Answer

Log-Entry

Answer

Device-Group