NEW QUESTION 1
Which API capability is available on Cisco Firepower devices?

• A. Firepower Management Center - Sockets API
• B. Firepower Management Center - eStreamer API
• C. Firepower Management Center - Camera API
• D. Firepower Management Center - Host Output API

Answer: B

NEW QUESTION 2

Refer to the exhibit. A network operator must create a Python script that makes an API request to Cisco Umbrella to do a pattern search and return all matched URLs with category information.
Which code completes the script?

• A. URL = BASE_URL + "/find/exa[a-z]ple.com" PARAMS = { "categoryinclude" : "true"}
• B. URL = BASE_URL + "/find/exa[a-z]ple.com" PARAMS = { "returncategory" : "true"}
• C. URL = BASE_URL + "/find/exa[a-z]ple.com" PARAMS = { "includeCategory" : "true"}
• D. URL = BASE_URL + "/find/exa[a-z]ple.com" PARAMS = { "returnCategory" : "true"}

Answer: D

NEW QUESTION 3
The Cisco Security Management Appliance API is used to make a GET call using the URI /sma/api/v2.0/reporting/mail_incoming_traffic_summary/detected_amp?startDate=2021-09-10T19:00:00.000Z&endDate=2021- 0924T23:00:00.000Z&device_type=esa&device_name=esa01.
What does this GET call return?

• A. values of all counters of a counter group, with the device group name and device type for web
• B. value of a specific counter from a counter group, with the device name and type for email
• C. value of a specific counter from a counter group, with the device name and type for web
• D. values of all counters of a counter group, with the device group name and device type for email

Answer: D

NEW QUESTION 4
Which API is designed to give technology partners the ability to send security events from their platform/service/appliance within a mutual customer's environment to the Umbrella cloud for enforcement?

• A. Cisco Umbrella Management API
• B. Cisco Umbrella Security Events API
• C. Cisco Umbrella Enforcement API
• D. Cisco Umbrella Reporting API

Answer: C

NEW QUESTION 5
Refer to the exhibit. A security engineer attempts to query the Cisco Security Management appliance to retrieve details of a specific message. What must be added to the script to achieve the desired result?

• A. Add message ID information to the URL string as a URI.
• B. Run the script and parse through the returned data to find the desired message.
• C. Add message ID information to the URL string as a parameter.
• D. Add message ID information to the headers.

Answer: C

NEW QUESTION 6
Which two commands create a new local source code branch? (Choose two.)

• A. git checkout -b new_branch
• B. git branch -b new_branch
• C. git checkout -f new_branch
• D. git branch new_branch
• E. git branch -m new_branch

Answer: AD

NEW QUESTION 7

Refer to the exhibit.
What is the purpose of the API represented by this URL?

• A. Getting or setting intrusion policies in FMC
• B. Creating an intrusion policy in FDM
• C. Updating access policies
• D. Getting the list of intrusion policies configured in FDM

Answer: D

NEW QUESTION 8
Which curl command lists all tags (host groups) that are associated with a tenant using the Cisco Stealthwatch Enterprise API?

• A. curl -X PUT"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags
• B. curl -X POST -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/tags
• C. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags
• D. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc- configuration/rest/v1/tenants/tags

Answer: C

NEW QUESTION 9
What are two benefits of Ansible when managing security platforms? (Choose two.)

• A. End users can be identified and tracked across a network.
• B. Network performance issues can be identified and automatically remediated.
• C. Policies can be updated on multiple devices concurrently, which reduces outage windows.
• D. Anomalous network traffic can be detected and correlated.
• E. The time that is needed to deploy a change is reduced, compared to manually applying the change.

Answer: CE

NEW QUESTION 10
FILL BLANK
Fill in the blank to complete the statement with the correct technology.
Cisco Investigate provides access to data that pertains to DNS security events and correlations collected by the Cisco security team.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Umbrella

NEW QUESTION 11
DRAG DROP

Refer to the exhibit. A Python function named "query" has been developed, and will be used to query the service "com.cisco.ise.session" via Cisco pxGrid 2.0 APIs. Drag and drop the code to construct a Python call to the "query" function to identify the user groups that are associated with the user "fred". Not all options are used. Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 12
DRAG DROP
Drag and drop the code to complete the Cisco Umbrella Investigate WHOIS query that returns a list of domains that are associated with the email address "admin@example.com". Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 13
Which URI string is used to create a policy that takes precedence over other applicable policies that are configured on Cisco Stealthwatch?

• A. /tenants/{tenantId}/policy/system/host-policy
• B. /tenants/{tenantId}/policy/system/role-policy
• C. /tenants/{tenantId}/policy/system
• D. /tenants/{tenantId}/policy/system/{policyId}

Answer: A

NEW QUESTION 14
What are two capabilities of Cisco Firepower Management Center eStreamer? (Choose two.)

• A. eStreamer is used to get sources for intelligence services.
• B. eStreamer is used to send malware event data.
• C. eStreamer is used to get a list of access control policies.
• D. eStreamer is used to send policy data.
• E. eStreamer is used to send intrusion event data.

Answer: BE

NEW QUESTION 15

Refer to the exhibit. A Python function named "query" has been developed and the goal is to use it to query the service "com.cisco.ise.session" via Cisco pxGrid 2.0 APIs. How is the function called, if the goal is to identify the sessions that are associated with the IP address 10.0.0.50?

• A. query(config, secret, "getSessionByIpAddress/10.0.0.50", "ipAddress")
• B. query(config, "10.0.0.50", url, payload)
• C. query(config, secret, url, "10.0.0.50")
• D. query(config, secret, url, '{"ipAddress": "10.0.0.50"}')

Answer: D

NEW QUESTION 16
If the goal is to create an access policy with the default action of blocking traffic, using Cisco Firepower Management Center REST APIs, which snippet is used?

• A.
• B.
• C.
• D.

Answer: D

NEW QUESTION 17
DRAG DROP

Refer to the exhibit.
Drag and drop the elements from the left onto the script on the right that queries Cisco ThreatGRID for indications of compromise.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 18
Refer to the exhibit. The script outputs too many results when it is queried against the Cisco Umbrella Reporting API. Which two configurations restrict the returned result to only 10 entries? (Choose two.)

• A. Add params parameter in the get and assign in the {"return": "10"} value.
• B. Add ?limit=10 to the end of the URL string.
• C. Add params parameter in the get and assign in the {"limit": "10"} value.
• D. Add ?find=10 to the end of the URL string.
• E. Add ?return=10 to the end of the URL string.

Answer: BC

NEW QUESTION 19

Refer to the exhibit. A security engineer created a script and successfully executed it to retrieve all currently open alerts. Which print command shows the first returned alert?

• A. print(response[data][0])
• B. print(response[results][0])
• C. print(response.json()[data][0])
• D. print(response.json()[results][0])

Answer: A

NEW QUESTION 20

Refer to the exhibit.
What must be present in a Cisco Web Security Appliance before the script is run?

• A. reporting group with the name web_malware_category_malware_name_user_detail
• B. data for specified dates
• C. reporting group with the name blocked_malware
• D. data in the queried category

Answer: A

NEW QUESTION 21
DRAG DROP
Drag and drop the code to complete the curl query to the Umbrella Reporting API that provides a detailed report of blocked security activity events from the organization with an organizationId of "12345678" for the last 24 hours. Not all options are used.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 22
When the URI "/api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/policy/accesspolicies" is used to make a POST request, what does "e276abec-e0f2-11e3-8169- 6d9ed49b625f" represent?

• A. API token
• B. domain UUID
• C. access policy UUID
• D. object UUID

Answer: B

NEW QUESTION 23
Which step is required by Cisco pxGrid providers to expose functionality to consumer applications that are written in Python? A. Look up the existing service using the /pxgrid/control/ServiceLookup endpoint.

• A. Register the service using the /pxgrid/control/ServiceRegister endpoint.
• B. Configure the service using the /pxgrid/ise/config/profiler endpoint.
• C. Expose the service using the /pxgrid/ise/pubsub endpoint.

Answer: D

NEW QUESTION 24
What is the purpose of the snapshot APIs exposed by Cisco Stealthwatch Cloud?

• A. Report on flow data during a customizable time period.
• B. Operate and return alerts discovered from infrastructure observations.
• C. Return current configuration data of Cisco Stealthwatch Cloud infrastructure.
• D. Create snapshots of supported Cisco Stealthwatch Cloud infrastructure.

Answer: B

NEW QUESTION 25
Which two APIs are available from Cisco ThreatGRID? (Choose two.)

• A. Access
• B. User Scope
• C. Data
• D. Domains
• E. Curated Feeds

Answer: CE

NEW QUESTION 26
......