SAUTO · domain
Network Security
Practise Cisco Automating and Programming Cisco Security Solutions (SAUTO, 300-735, CCNP Security) (SAUTO) Network Security practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice Network Security questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Network Security
Network Security questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common Network Security exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All Network Security questions (71)
Click any question to see the full explanation, or start a practice session above.
Which TWO of the following are components of a URL? (Choose two)
Medium2When automating Cisco Stealthwatch (Secure Network Analytics) alerts, which API endpoint is used to query flow data?
Medium3You are implementing automated log retrieval from Cisco ASA using the REST API. What is the limitation of the 'get_logs' endpoint?
Hard4Which THREE of the following are mandatory components of an HTTP REST request? (Choose three)
Medium5Which TWO of the following steps are involved in the Cisco Firepower API authentication workflow? (Choose two)
Hard6You are performing a bulk update of Security Group Tags (SGTs) in Cisco ISE. Which mechanism should you prioritize to minimize load on the API when processing thousands of tags?
Hard7Which TWO of the following are primary benefits of automating Cisco security policies via APIs? (Choose two)
Medium8You are automating Firepower Management Center event retrieval. You notice your script is getting an HTTP 429 response. What should your automation script implement?
Hard9You are automating Cisco ASA firewall rule updates using the REST API. Which data format is required in the request body when pushing a new access control entry?
Medium10Which TWO of the following are valid methods for interacting with Cisco ISE programmatically?
Medium11Which Cisco security product API supports 'Bulk' operations to improve efficiency when modifying large numbers of objects?
Medium12You are automating Cisco Firepower Management Center (FMC) object creation using the REST API. You successfully POST a new network object, but the changes do not appear on the managed Firepower Threat Defense (FTD) device. What is the mandatory final step to ensure the changes take effect?
Medium13What is the primary function of a 'Bearer Token' in an API request?
Easy14You are configuring an Ansible playbook to manage Cisco Firepower policies. Which module is specifically designed to interact with FMC objects?
Medium15When interacting with the Cisco ISE ERS API, you receive an HTTP 401 error. What is the most likely cause?
Hard16Which THREE of the following are common issues encountered when automating Cisco Security APIs? (Choose three)
Hard17Which THREE of the following are key considerations when designing an automated security script? (Choose three)
Hard18You are using the Cisco ASA REST API to retrieve the current status of an interface. Which HTTP method should be used to perform this read operation?
Easy19A network engineer is using the Cisco Firepower Management Center (FMC) API to retrieve access control policy information. Which HTTP method should be used to perform a read-only request for a specific policy resource?
Easy20You are running a script that interacts with the Cisco ISE ERS API. The script is designed to perform a bulk import of users. Which HTTP code should you expect for a successful creation request?
Hard21Which element in an API request is most often used to filter the amount of data returned?
Medium22Which THREE of the following actions can be automated via the Cisco ASA REST API?
Hard23Which protocol is primarily used for the transport of API calls in the Cisco security portfolio?
Easy24Which THREE of the following are methods used in REST APIs? (Choose three)
Hard25When using the Cisco ISE ERS API, what is the impact of not specifying the 'Accept' header in your request?
Hard26When working with Cisco Firepower API, what is the role of the 'ETag' header in an API response?
Hard27You are writing a Python script to interact with the Cisco Adaptive Security Appliance (ASA) via the REST API. You need to verify that your session token remains valid. Which header must be included in subsequent API calls to maintain the authenticated session?
Hard28Which Python library is the industry standard for sending HTTP requests to Cisco security APIs?
Easy29Which TWO of the following are key features of the Cisco DevNet site? (Choose two)
Medium30You are using the Cisco Firepower Management Center (FMC) API to retrieve a list of Access Control Policies. Which URL endpoint is correct?
Medium31Which TWO components are typically required to initiate a connection to the Cisco Umbrella API?
Easy32Which Cisco Security tool uses 'Webhooks' to push real-time threat intelligence to external systems?
Medium33In a Cisco security automation environment, what does the 'API Rate Limit' represent?
Easy34Which TWO of the following are true regarding the Cisco Firepower Management Center (FMC) API?
Medium35When designing secure network automation, which practice is considered the most critical for API credentials?
Easy36When using the Cisco Umbrella Reporting API, what is the default limit for the number of records returned in a single GET request?
Medium37When automating security, which methodology is used to treat infrastructure configurations as code?
Medium38What does the 'Authorization' header in a REST API call carry?
Easy39When using the Cisco SecureX API, what is the purpose of the 'Application Name' field in the API client registration?
Hard40You are automating Cisco Firepower policy deployment. After updating the Access Control Policy (ACP) via the API, you must initiate the deployment. Which API endpoint triggers the deployment task?
Medium41Which TWO of the following are true about Cisco Firepower API? (Choose two)
Medium42Which Cisco security component provides visibility and control over cloud-based threats?
Easy43In Python, which HTTP library is most recommended for interacting with Cisco Security APIs due to its simplicity and features?
Easy44You are writing a script to parse FMC API response data. The response is a nested JSON object. Which Python library is standard for handling this task?
Medium45Which authentication method is most commonly used by Cisco SecureX for API access?
Medium46Which Cisco technology allows you to automate the distribution of Indicators of Compromise (IoCs) across the security stack?
Medium47When automating Cisco Stealthwatch, which authentication type is utilized for the API?
Medium48You are utilizing the Cisco ISE ERS API to provision a guest account. If the API returns a '409 Conflict', what is the most likely cause?
Hard49Which Cisco tool is best suited for centralizing the management of security APIs across multiple platforms?
Medium50When automating threat hunting with the Cisco SecureX Threat Response API, which object type is commonly used as a search parameter?
Medium51Which TWO of the following are characteristics of the Cisco ISE ERS API? (Choose two)
Hard52You are configuring a Cisco ISE external RESTful service (ERS) integration. You need to update the status of a guest user. Which HTTP method and resource URI structure is correct?
Hard53What is the primary function of an API 'sandbox' in Cisco DevNet?
Easy54Which TWO of the following are types of Cisco Security API documentation? (Choose two)
Medium55Which THREE of the following are core principles of Secure Network Design when using APIs?
Hard56Which THREE of the following fields are commonly found in a JSON API response object? (Choose three)
Medium57You are automating Cisco Firepower Management Center (FMC) via the REST API. You need to update an existing object. Which HTTP method must you use to ensure a full update of the resource representation?
Medium58You are automating Firepower Management Center (FMC) object creation using the REST API. You send a POST request to /api/fmc_config/v1/domain/{domainUUID}/object/networkaddresses with a body containing a name and type. The request returns a 400 Bad Request error. What is the most likely cause?
Medium59When automating Cisco Security solutions, what is the primary benefit of using a 'Service Account' instead of a personal user account for API authentication?
Hard60Which TWO of the following are valid ways to test Cisco APIs before deployment? (Choose two)
Medium61You are automating threat response using Cisco Threat Response. You want to retrieve a list of verdicts for a specific observable (e.g., an IP address). Which API provides this capability?
Hard62In the context of the Cisco Firepower API, what does a 'GET' request to '/api/fmc_config/v1/domain/{domainUUID}/policy/accesspolicies' return?
Hard63When using the FMC API, what is the purpose of the 'X-Auth-Access-Token' header?
Easy64Which THREE of the following are best practices for managing API keys? (Choose three)
Hard65You are configuring a CI/CD pipeline to deploy Cisco ASA firewall rules. Which step is essential to ensure the changes are correct before applying them to production?
Medium66Which Cisco security product uses the pxGrid framework to share contextual information with other network devices?
Easy67Which programming language is most commonly used for Cisco Security automation tasks?
Easy68Which TWO steps are required to properly authenticate to the Cisco Firepower Management Center (FMC) API using the REST API Explorer?
Hard69You are troubleshooting a Python script using the Cisco pxGrid API. The script fails to receive notifications from ISE. Which component must be verified first?
Hard70A script needs to update a Cisco Firepower object. Which API workflow is correct?
Medium71In the context of the Cisco ASA REST API, what is the role of the 'ETag' header in an API response?
MediumOther domains
All SAUTO exam domains
Frequently asked questions
- What does the Network Security domain cover on the SAUTO exam?
- Network Security questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 71 Network Security questions in the SAUTO question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Network Security questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.