Cisco 300-735 Online Practice Questions and Exam Preparation

Cisco 300-735 Online Questions & Answers

• Question 21:

  Refer to the exhibit. A network operator wrote a Python script to retrieve events from Cisco AMP.

  

  Against which API gateway must the operator make the request?

  A. BASE_URL = "https://api.amp.cisco.com"
  B. BASE_URL = "https://amp.cisco.com/api"
  C. BASE_URL = "https://amp.cisco.com/api/"
  D. BASE_URL = "https://api.amp.cisco.com/"
  A. BASE_URL = "https://api.amp.cisco.com"

• Question 22:

  DRAG DROP

  Drag and drop the code to complete the curl query to the Cisco Umbrella Investigate API for the Latest Malicious Domains for the IP address 10.10.20.50. Not all options are used.

  Select and Place:

  

  

  ---

  Reference: https://docs.umbrella.com/investigate-api/reference#about-the-api-and-authentication

• Question 23:

  DRAG DROP

  Drag and drop the code to complete the script to search Cisco ThreatGRID and return all public submission records associated with cisco.com. Not all options are used.

  Select and Place:

  

  

  ---

  Reference: https://community.cisco.com/t5/endpoint-security/amp-threat-grid-api/m-p/3538319

• Question 24:

  Which curl command lists all tags (host groups) that are associated with a tenant using the Cisco Stealthwatch Enterprise API?

  A. curl -X PUT"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags
  B. curl -X POST -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/tags
  C. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags
  D. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/tags
  C. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags

• Question 25:

  Which API is used to query if the domain "example.com" has been flagged as malicious by the Cisco Security Labs team?

  A. https://s-platform.api.opendns.com/1.0/events?example.com
  B. https://investigate.api.umbrella.com/domains/categorization/example.com
  C. https://investigate.api.umbrella.com/domains/volume/example.com
  D. https://s-platform.api.opendns.com/1.0/domains?example.com
  B. https://investigate.api.umbrella.com/domains/categorization/example.com

• Question 26:

  If the goal is to create an access policy with the default action of blocking traffic, using Cisco Firepower Management Center REST APIs, which snippet is used?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 27:

  Which two event types can the eStreamer server transmit to the requesting client from a managed device and a management center? (Choose two.)

  A. user activity events
  B. intrusion events
  C. file events
  D. intrusion event extra data
  E. malware events
  B. intrusion events
  D. intrusion event extra data

• Question 28:

  Which snippet is used to create an object for network 10.0.69.0/24 using Cisco Firepower Management Center REST APIs?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 29:

  Which two destinations are supported by the Cisco Security Management Appliance reporting APIs? (Choose two.)

  A. email
  B. Microsoft Word file
  C. FTP
  D. web
  E. csv file
  A. email
  D. web

• Question 30:

  DRAG DROP

  Drag and drop the items to complete the ThreatGRID API call to return a curated feed of sinkholed-ip-dns in stix format. Not all options are used.

  Select and Place:

  

  

  ---

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/DEVNET-2164.pdf