NEW QUESTION 1
Which API capability is available on Cisco Firepower devices?

• A. Firepower Management Center - Sockets API
• B. Firepower Management Center - eStreamer API
• C. Firepower Management Center - Camera API
• D. Firepower Management Center - Host Output API

Answer: B

NEW QUESTION 2
DRAG DROP
Drag and drop the code to complete the script to search Cisco ThreatGRID and return all public submission records associated with cisco.com. Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 3
If the goal is to create an access policy with the default action of blocking traffic, using Cisco Firepower Management Center REST APIs, which snippet is used?

• A.
• B.
• C.
• D.

Answer: D

NEW QUESTION 4
Which API is designed to give technology partners the ability to send security events from their platform/service/appliance within a mutual customer's environment to the Umbrella cloud for enforcement?

• A. Cisco Umbrella Management API
• B. Cisco Umbrella Security Events API
• C. Cisco Umbrella Enforcement API
• D. Cisco Umbrella Reporting API

Answer: C

NEW QUESTION 5
DRAG DROP
Drag and drop the code to complete the curl query to the Umbrella Reporting API that provides a detailed report of blocked security activity events from the organization with an organizationId of "12345678" for the last 24 hours. Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 6
DRAG DROP
Drag and drop the code to complete the Cisco Umbrella Investigate WHOIS query that returns a list of domains that are associated with the email address "admin@example.com". Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 7
Which query parameter is required when using the reporting API of Cisco Security Management Appliances?

• A. device_type
• B. query_type
• C. filterValue
• D. startDate + endDate

Answer: D

NEW QUESTION 8

Refer to the exhibit. The security administrator must temporarily disallow traffic that goes to a production web server using the Cisco FDM REST API. The administrator sends an API query as shown in the exhibit. What is the outcome of that action?

• A. The given code does not execute because the mandatory parameters, source, destination, and services are missin
• B. The given code does not execute because it uses the HTTP method "PUT". It should use the HTTP method "POST".
• C. The appropriate rule is updated with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.
• D. A new rule is created with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.

Answer: C

NEW QUESTION 9
When the URI "/api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/policy/accesspolicies" is used to make a POST request, what does "e276abec-e0f2-11e3-8169- 6d9ed49b625f" represent?

• A. API token
• B. domain UUID
• C. access policy UUID
• D. object UUID

Answer: B

NEW QUESTION 10

Refer to the exhibit. A network operator must create a Python script that makes an API request to Cisco Umbrella to do a pattern search and return all matched URLs with category information.
Which code completes the script?

• A. URL = BASE_URL + "/find/exa[a-z]ple.com" PARAMS = { "categoryinclude" : "true"}
• B. URL = BASE_URL + "/find/exa[a-z]ple.com" PARAMS = { "returncategory" : "true"}
• C. URL = BASE_URL + "/find/exa[a-z]ple.com" PARAMS = { "includeCategory" : "true"}
• D. URL = BASE_URL + "/find/exa[a-z]ple.com" PARAMS = { "returnCategory" : "true"}

Answer: D

NEW QUESTION 11
What are two advantages of Python virtual environments? (Choose two.)

• A. Virtual environments can move compiled modules between different platforms.
• B. Virtual environments permit non-administrative users to install packages.
• C. The application code is run in an environment that is destroyed upon exit.
• D. Virtual environments allow for stateful high availability.
• E. Virtual environments prevent packaging conflicts between multiple Python projects.

Answer: CE

NEW QUESTION 12

Refer to the exhibit. A security engineer created a script and successfully executed it to retrieve all currently open alerts. Which print command shows the first returned alert?

• A. print(response[data][0])
• B. print(response[results][0])
• C. print(response.json()[data][0])
• D. print(response.json()[results][0])

Answer: A

NEW QUESTION 13
After changes are made to the Cisco Firepower Threat Defense configuration using the Cisco Firepower Device Manager API, what must be done to ensure that the new policy is activated?

• A. Submit a POST to the /api/fdm/latest/operational/deploy URI.
• B. Submit a GET to the /api/fdm/latest/operational/deploy URI.
• C. Submit a PUT to the /api/fdm/latest/devicesettings/pushpolicy URI.
• D. Submit a POST to the /api/fdm/latest/devicesettings/pushpolicy URI.

Answer: A

NEW QUESTION 14
Refer to the exhibit. The script outputs too many results when it is queried against the Cisco Umbrella Reporting API. Which two configurations restrict the returned result to only 10 entries? (Choose two.)

• A. Add params parameter in the get and assign in the {"return": "10"} value.
• B. Add ?limit=10 to the end of the URL string.
• C. Add params parameter in the get and assign in the {"limit": "10"} value.
• D. Add ?find=10 to the end of the URL string.
• E. Add ?return=10 to the end of the URL string.

Answer: BC

NEW QUESTION 15
DRAG DROP
Drag and drop the code to complete the URL for the Cisco AMP for Endpoints API POST request so that it will add a sha256 to a given file_list using file_list_guid.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 16
Refer to the exhibit.
Which expression prints the text "802.1x"?

• A. print(quiz[0]['choices']['b'])
• B. print(quiz['choices']['b'])
• C. print(quiz[0]['choices']['b']['802.1x'])
• D. print(quiz[0]['question']['choices']['b'])

Answer: A

NEW QUESTION 17
DRAG DROP
Drag and drop the items to complete the ThreatGRID API call to return a curated feed of sinkholed-ip-dns in stix format. Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 18
Which API is used to query if the domain “example.com” has been flagged as malicious by the Cisco Security Labs team?

• A. https://s-platform.api.opendns.com/1.0/events?example.com
• B. https://investigate.api.umbrella.com/domains/categorization/example.com
• C. https://investigate.api.umbrella.com/domains/volume/example.com
• D. https://s-platform.api.opendns.com/1.0/domains?example.com

Answer: B

NEW QUESTION 19

Refer to the exhibit.
What is the purpose of the API represented by this URL?

• A. Getting or setting intrusion policies in FMC
• B. Creating an intrusion policy in FDM
• C. Updating access policies
• D. Getting the list of intrusion policies configured in FDM

Answer: D

NEW QUESTION 20
Which two event types can the eStreamer server transmit to the requesting client from a managed device and a management center? (Choose two.)

• A. user activity events
• B. intrusion events
• C. file events
• D. intrusion event extra data
• E. malware events

Answer: BD

NEW QUESTION 21
Refer to the exhibit. A security engineer attempts to query the Cisco Security Management appliance to retrieve details of a specific message. What must be added to the script to achieve the desired result?

• A. Add message ID information to the URL string as a URI.
• B. Run the script and parse through the returned data to find the desired message.
• C. Add message ID information to the URL string as a parameter.
• D. Add message ID information to the headers.

Answer: C

NEW QUESTION 22
Which two API capabilities are available on Cisco Identity Services Engine? (Choose two.)

• A. Platform Configuration APIs
• B. Monitoring REST APIs
• C. Performance Management REST APIs
• D. External RESTful Services APIs
• E. Internal RESTful Services APIs

Answer: BD

NEW QUESTION 23
What are two benefits of Ansible when managing security platforms? (Choose two.)

• A. End users can be identified and tracked across a network.
• B. Network performance issues can be identified and automatically remediated.
• C. Policies can be updated on multiple devices concurrently, which reduces outage windows.
• D. Anomalous network traffic can be detected and correlated.
• E. The time that is needed to deploy a change is reduced, compared to manually applying the change.

Answer: CE

NEW QUESTION 24
Which two URI parameters are needed for the Cisco Stealthwatch Top Alarm Host v1 API? (Choose two.)

• A. startAbsolute
• B. externalGeos
• C. tenantId
• D. intervalLength
• E. tagID

Answer: CE

NEW QUESTION 25
......