Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.
Start Scenario PracticeWhich TWO components are required when configuring the Cisco Secure Web Appliance (SWA) to allow API access?
Explanation: Option A is correct because the Cisco Secure Web Appliance (SWA) requires the REST API feature to be enabled in the Feature Key or System settings before any API access is possible; without this license/feature activation, the API endpoints are unavailable. Option B is correct because API access must be authenticated with a dedicated API user account that has the appropriate administrative roles (for example, an admin or operator role with API permissions), since the SWA validates credentials and role-based permissions for every API request. Option C is not required because API access does not depend on configuring a local DNS server; DNS is only needed for name resolution of external services, not for enabling the API itself. Option D is not required because SNMP v3 credentials are used for monitoring via SNMP, not for REST API authentication or access. Option E is not required because IPsec VPN tunneling is a network transport feature and is unrelated to enabling or authenticating API access on the SWA.
Which TWO statements accurately describe the behavior of the NETCONF 'candidate' data store?
Explanation: Option A is correct because the NETCONF candidate datastore is a scratchpad where configuration changes can be staged and then thrown away with the <discard-changes> operation if the proposed edits are wrong, leaving the running configuration untouched. Option E is correct because the candidate datastore is not active until the client issues a <commit> operation, which copies the candidate configuration into the running datastore so it takes effect on the device. Option B is wrong because NETCONF candidate edits are serialized under a lock (candidate lock or partial lock); concurrent edits are not automatically merged, and a second user must wait or use separate candidate instances. Option C is wrong because changes in the candidate store are not immediately active — they only become active after a successful commit to the running store. Option D is wrong because XML encoding is the standard NETCONF encoding for all datastores (running, candidate, startup), not a feature unique to the candidate store.
Which TWO of the following are types of Cisco Security API documentation? (Choose two)
Explanation: Option A (Swagger/OpenAPI specifications) is correct because Cisco Security APIs publish machine-readable interface definitions in Swagger 2.0 or OpenAPI 3.0 format, which document endpoints, HTTP methods, parameters, authentication schemes, and response schemas for programmatic consumption. Option B (Developer portal HTML/web docs) is correct because Cisco hosts human-readable API reference documentation on developer portals such as developer.cisco.com, providing guides, endpoint descriptions, and code samples in HTML/web form. Option C is incorrect because physical paper manuals are not a recognized API documentation type for Cisco Security APIs. Option D is incorrect because Cisco does not distribute API source code as a documentation format. Option E is incorrect because voice-recorded tutorials are not a standard API documentation type.
Which THREE of the following are true about the Cisco Umbrella API?
Explanation: Option A is correct because the Cisco Umbrella API authenticates requests using an API Key and Secret, which are generated in the Umbrella dashboard and used to obtain an OAuth 2.0 token for API calls. Option B is correct because the Umbrella API follows REST principles, using standard HTTP methods (GET, POST, PUT, DELETE) and JSON-formatted requests and responses over HTTPS. Option E is correct because the Umbrella API provides both management capabilities (such as configuring policies, networks, and identities) and reporting capabilities (such as retrieving security activity and traffic reports). Option C is incorrect because the Umbrella API is available across multiple Umbrella packages and account types, not exclusively Enterprise accounts. Option D is incorrect because the Umbrella API is REST-based, not SOAP-based.
Which THREE components are required to configure an API client for Cisco SecureX?
Explanation: To configure an API client for Cisco SecureX, you must supply the OAuth 2.0 credentials that SecureX generates when the client is created: the Client ID (E), which uniquely identifies the API client, the Client Secret (D), which authenticates that client, and the API Scope (C), which defines the specific permissions or resources the client may access. These three values are used together in the token request to obtain an access token for calling SecureX APIs. A Device Serial Number (A) is not part of API client authentication; it is hardware-identifying information used for device licensing and support, not for OAuth client credentials. A User Password (B) is likewise not required, because SecureX API clients authenticate with the generated client credentials rather than a user's account password.
+15 more scenario questions available
Practice all Select Two (Multi-Select) QuestionsMulti-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination. These appear throughout the SAUTO and require you to apply your knowledge, not just recall facts.
Cisco doesn't publish an exact breakdown, but scenario-based questions (especially exhibit and command-output formats) make up a significant portion of the SAUTO. Practicing each scenario type ensures you're ready for any format.
Yes. Courseiva provides free SAUTO scenario practice across all official exam domains. The platform includes scenario-based questions, command-output interpretation, topic-based practice, mock exams, and readiness tracking — no account required.
Launch a full Select Two (Multi-Select) Questions session with instant scoring and detailed explanations.
Start Scenario Practice →