Courseiva

SAUTO · domain

Network Security

Practise Cisco Automating and Programming Cisco Security Solutions (SAUTO, 300-735, CCNP Security) (SAUTO) Network Security practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

71 questions15 easy32 medium24 hard

Focused practice

Practice Network Security questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Network Security

Network Security questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Network Security exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Question index

All Network Security questions (71)

Click any question to see the full explanation, or start a practice session above.

1

Which TWO of the following are components of a URL? (Choose two)

Medium
2

When automating Cisco Stealthwatch (Secure Network Analytics) alerts, which API endpoint is used to query flow data?

Medium
3

You are implementing automated log retrieval from Cisco ASA using the REST API. What is the limitation of the 'get_logs' endpoint?

Hard
4

Which THREE of the following are mandatory components of an HTTP REST request? (Choose three)

Medium
5

Which TWO of the following steps are involved in the Cisco Firepower API authentication workflow? (Choose two)

Hard
6

You are performing a bulk update of Security Group Tags (SGTs) in Cisco ISE. Which mechanism should you prioritize to minimize load on the API when processing thousands of tags?

Hard
7

Which TWO of the following are primary benefits of automating Cisco security policies via APIs? (Choose two)

Medium
8

You are automating Firepower Management Center event retrieval. You notice your script is getting an HTTP 429 response. What should your automation script implement?

Hard
9

You are automating Cisco ASA firewall rule updates using the REST API. Which data format is required in the request body when pushing a new access control entry?

Medium
10

Which TWO of the following are valid methods for interacting with Cisco ISE programmatically?

Medium
11

Which Cisco security product API supports 'Bulk' operations to improve efficiency when modifying large numbers of objects?

Medium
12

You are automating Cisco Firepower Management Center (FMC) object creation using the REST API. You successfully POST a new network object, but the changes do not appear on the managed Firepower Threat Defense (FTD) device. What is the mandatory final step to ensure the changes take effect?

Medium
13

What is the primary function of a 'Bearer Token' in an API request?

Easy
14

You are configuring an Ansible playbook to manage Cisco Firepower policies. Which module is specifically designed to interact with FMC objects?

Medium
15

When interacting with the Cisco ISE ERS API, you receive an HTTP 401 error. What is the most likely cause?

Hard
16

Which THREE of the following are common issues encountered when automating Cisco Security APIs? (Choose three)

Hard
17

Which THREE of the following are key considerations when designing an automated security script? (Choose three)

Hard
18

You are using the Cisco ASA REST API to retrieve the current status of an interface. Which HTTP method should be used to perform this read operation?

Easy
19

A network engineer is using the Cisco Firepower Management Center (FMC) API to retrieve access control policy information. Which HTTP method should be used to perform a read-only request for a specific policy resource?

Easy
20

You are running a script that interacts with the Cisco ISE ERS API. The script is designed to perform a bulk import of users. Which HTTP code should you expect for a successful creation request?

Hard
21

Which element in an API request is most often used to filter the amount of data returned?

Medium
22

Which THREE of the following actions can be automated via the Cisco ASA REST API?

Hard
23

Which protocol is primarily used for the transport of API calls in the Cisco security portfolio?

Easy
24

Which THREE of the following are methods used in REST APIs? (Choose three)

Hard
25

When using the Cisco ISE ERS API, what is the impact of not specifying the 'Accept' header in your request?

Hard
26

When working with Cisco Firepower API, what is the role of the 'ETag' header in an API response?

Hard
27

You are writing a Python script to interact with the Cisco Adaptive Security Appliance (ASA) via the REST API. You need to verify that your session token remains valid. Which header must be included in subsequent API calls to maintain the authenticated session?

Hard
28

Which Python library is the industry standard for sending HTTP requests to Cisco security APIs?

Easy
29

Which TWO of the following are key features of the Cisco DevNet site? (Choose two)

Medium
30

You are using the Cisco Firepower Management Center (FMC) API to retrieve a list of Access Control Policies. Which URL endpoint is correct?

Medium
31

Which TWO components are typically required to initiate a connection to the Cisco Umbrella API?

Easy
32

Which Cisco Security tool uses 'Webhooks' to push real-time threat intelligence to external systems?

Medium
33

In a Cisco security automation environment, what does the 'API Rate Limit' represent?

Easy
34

Which TWO of the following are true regarding the Cisco Firepower Management Center (FMC) API?

Medium
35

When designing secure network automation, which practice is considered the most critical for API credentials?

Easy
36

When using the Cisco Umbrella Reporting API, what is the default limit for the number of records returned in a single GET request?

Medium
37

When automating security, which methodology is used to treat infrastructure configurations as code?

Medium
38

What does the 'Authorization' header in a REST API call carry?

Easy
39

When using the Cisco SecureX API, what is the purpose of the 'Application Name' field in the API client registration?

Hard
40

You are automating Cisco Firepower policy deployment. After updating the Access Control Policy (ACP) via the API, you must initiate the deployment. Which API endpoint triggers the deployment task?

Medium
41

Which TWO of the following are true about Cisco Firepower API? (Choose two)

Medium
42

Which Cisco security component provides visibility and control over cloud-based threats?

Easy
43

In Python, which HTTP library is most recommended for interacting with Cisco Security APIs due to its simplicity and features?

Easy
44

You are writing a script to parse FMC API response data. The response is a nested JSON object. Which Python library is standard for handling this task?

Medium
45

Which authentication method is most commonly used by Cisco SecureX for API access?

Medium
46

Which Cisco technology allows you to automate the distribution of Indicators of Compromise (IoCs) across the security stack?

Medium
47

When automating Cisco Stealthwatch, which authentication type is utilized for the API?

Medium
48

You are utilizing the Cisco ISE ERS API to provision a guest account. If the API returns a '409 Conflict', what is the most likely cause?

Hard
49

Which Cisco tool is best suited for centralizing the management of security APIs across multiple platforms?

Medium
50

When automating threat hunting with the Cisco SecureX Threat Response API, which object type is commonly used as a search parameter?

Medium
51

Which TWO of the following are characteristics of the Cisco ISE ERS API? (Choose two)

Hard
52

You are configuring a Cisco ISE external RESTful service (ERS) integration. You need to update the status of a guest user. Which HTTP method and resource URI structure is correct?

Hard
53

What is the primary function of an API 'sandbox' in Cisco DevNet?

Easy
54

Which TWO of the following are types of Cisco Security API documentation? (Choose two)

Medium
55

Which THREE of the following are core principles of Secure Network Design when using APIs?

Hard
56

Which THREE of the following fields are commonly found in a JSON API response object? (Choose three)

Medium
57

You are automating Cisco Firepower Management Center (FMC) via the REST API. You need to update an existing object. Which HTTP method must you use to ensure a full update of the resource representation?

Medium
58

You are automating Firepower Management Center (FMC) object creation using the REST API. You send a POST request to /api/fmc_config/v1/domain/{domainUUID}/object/networkaddresses with a body containing a name and type. The request returns a 400 Bad Request error. What is the most likely cause?

Medium
59

When automating Cisco Security solutions, what is the primary benefit of using a 'Service Account' instead of a personal user account for API authentication?

Hard
60

Which TWO of the following are valid ways to test Cisco APIs before deployment? (Choose two)

Medium
61

You are automating threat response using Cisco Threat Response. You want to retrieve a list of verdicts for a specific observable (e.g., an IP address). Which API provides this capability?

Hard
62

In the context of the Cisco Firepower API, what does a 'GET' request to '/api/fmc_config/v1/domain/{domainUUID}/policy/accesspolicies' return?

Hard
63

When using the FMC API, what is the purpose of the 'X-Auth-Access-Token' header?

Easy
64

Which THREE of the following are best practices for managing API keys? (Choose three)

Hard
65

You are configuring a CI/CD pipeline to deploy Cisco ASA firewall rules. Which step is essential to ensure the changes are correct before applying them to production?

Medium
66

Which Cisco security product uses the pxGrid framework to share contextual information with other network devices?

Easy
67

Which programming language is most commonly used for Cisco Security automation tasks?

Easy
68

Which TWO steps are required to properly authenticate to the Cisco Firepower Management Center (FMC) API using the REST API Explorer?

Hard
69

You are troubleshooting a Python script using the Cisco pxGrid API. The script fails to receive notifications from ISE. Which component must be verified first?

Hard
70

A script needs to update a Cisco Firepower object. Which API workflow is correct?

Medium
71

In the context of the Cisco ASA REST API, what is the role of the 'ETag' header in an API response?

Medium

Frequently asked questions

What does the Network Security domain cover on the SAUTO exam?
Network Security questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 71 Network Security questions in the SAUTO question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Network Security questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
cisco-sauto CISCO-SAUTO network security Practice Questions