SAUTO Practice Test 8 — 10 Questions

Question 1

You are automating the retrieval of threat intelligence logs from Cisco Secure Email Cloud Gateway. Which API interface provides the most efficient way to fetch historical message tracking logs for automated analysis?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Reporting API. The Reporting API on Cisco Secure Email Cloud Gateway is purpose-built for retrieving historical message tracking data, including delivered, bounced, and quarantined messages over a time range. It exposes endpoints that query the message tracking database efficiently, making it the correct choice for automated historical log analysis. Other APIs serve different functions such as threat feeds or web security.

Answer

AsyncOS API

Answer

External Threat Feeds API

Answer

Web Security Appliance API

Question 2

Which Cisco security product should you use if your main goal is to automate the blocking of malicious DNS queries?

Accepted Answer

Cisco Umbrella. Cisco Umbrella is the industry-standard cloud solution for DNS-layer security and policy automation.

Answer

Cisco Secure Web Appliance

Answer

Cisco Cloudlock

Answer

Cisco Secure Email

Question 3

A script interacting with Cisco Cloudlock is receiving a 429 Too Many Requests error. What should the automation script implement to handle this gracefully?

Accepted Answer

Exponential backoff. Rate limiting (429) requires the implementation of an exponential backoff strategy.

Answer

Increase the timeout duration

Answer

Retry immediately

Answer

Switch to a different API key

Question 4

In the context of the Cisco Firepower API, what does a 'GET' request to '/api/fmc_config/v1/domain/{domainUUID}/policy/accesspolicies' return?

Accepted Answer

A list of all access control policies.. This path is the standard RESTful endpoint for listing all access control policies within a specific domain on the FMC.

Answer

The current system configuration backup.

Answer

A list of connected users.

Answer

A list of all device status events.

Question 5

Which element in an API request is most often used to filter the amount of data returned?

Accepted Answer

Query Parameters. Query parameters (e.g., ?limit=10 or ?offset=5) are the standard way to filter and paginate API responses.

Answer

HTTP Header

Answer

URL Path

Answer

Request Body

Question 6

What is the primary function of a 'Bearer Token' in an API request?

Accepted Answer

To authenticate the API request.. A Bearer Token is a credential that allows the holder (the bearer) to access the protected resource.

Answer

To define the API schema.

Answer

To compress the response.

Answer

To encrypt the payload.

Question 7

You are writing a script to parse FMC API response data. The response is a nested JSON object. Which Python library is standard for handling this task?

Accepted Answer

json. The 'json' module is the built-in Python library for encoding and decoding JSON objects.

Answer

requests

Answer

xml.etree

Answer

pandas

Question 8

In the context of the Cisco ASA REST API, what is the role of the 'ETag' header in an API response?

Accepted Answer

To provide concurrency control for updates. The ETag (Entity Tag) is used for concurrency control. It ensures that when you update a resource, you are modifying the version you expect, preventing 'lost updates'.

Answer

To cache the response

Answer

To identify the user session

Answer

To encrypt the payload

Question 9

When working with YANG data models in Cisco security automation, which TWO statements accurately describe the role of the 'leaf' and 'leaf-list' nodes?

Accepted Answer

A 'leaf-list' node allows for multiple instances of a specific value type.. A 'leaf' contains a single value, while a 'leaf-list' contains a sequence of values of a specific type.

Answer

A 'leaf' node can contain child nodes.

Answer

Both 'leaf' and 'leaf-list' support default values.

Answer

A 'leaf-list' node is used for hierarchical grouping.

Question 10

What does the 'Authorization' header in a REST API call carry?

Accepted Answer

The authentication token or credentials.. The 'Authorization' header in a REST API call is used to transmit credentials that authenticate the client to the server. This typically includes a token (e.g., Bearer token, API key) or other authentication scheme (e.g., Basic auth with base64-encoded username:password). It does not carry the server's public key, content type, or URL.

Answer

The server's public key.

Answer

The content type of the body.

Answer

The URL of the API.