Cisco CCNP 300-735 Questions & Answers

• Question 21:

  Which two destinations are supported by the Cisco Security Management Appliance reporting APIs? (Choose two.)

  A. email

  B. Microsoft Word file

  C. FTP

  D. web

  E. csv file

  Correct Answer: AD

• Question 22:

  What are two capabilities of Cisco Firepower Management Center eStreamer? (Choose two.)

  A. eStreamer is used to get sources for intelligence services.

  B. eStreamer is used to send malware event data.

  C. eStreamer is used to get a list of access control policies.

  D. eStreamer is used to send policy data.

  E. eStreamer is used to send intrusion event data.

  Correct Answer: BE

• Question 23:

  Refer to the exhibit.

  

  The script outputs too many results when it is queried against the Cisco Umbrella Reporting API.

  Which two configurations restrict the returned result to only 10 entries? (Choose two.)

  A. Add params parameter in the get and assign in the {"return": "10"} value.

  B. Add ?limit=10 to the end of the URL string.

  C. Add params parameter in the get and assign in the {"limit": "10"} value.

  D. Add ?find=10 to the end of the URL string.

  E. Add ?return=10 to the end of the URL string.

  Correct Answer: BC

• Question 24:

  Refer to the exhibit.

  

  The security administrator must temporarily disallow traffic that goes to a production web server using the Cisco FDM REST API. The administrator sends an API query as shown in the exhibit.

  What is the outcome of that action?

  A. The given code does not execute because the mandatory parameters, source, destination, and services are missing.

  B. The given code does not execute because it uses the HTTP method "PUT". It should use the HTTP method "POST".

  C. The appropriate rule is updated with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.

  D. A new rule is created with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.

  Correct Answer: C

• Question 25:

  Which curl command lists all tags (host groups) that are associated with a tenant using the Cisco Stealthwatch Enterprise API?

  A. curl -X PUT"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags

  B. curl -X POST -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/tags

  C. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/{tenant_id}/tags

  D. curl -X GET -H"Cookie:{Cookie Data}"https://{stealthwatch_host}/smc-configuration/rest/v1/tenants/tags

  Correct Answer: C

• Question 26:

  Which two event types can the eStreamer server transmit to the requesting client from a managed device and a management center? (Choose two.)

  A. user activity events

  B. intrusion events

  C. file events

  D. intrusion event extra data

  E. malware events

  Correct Answer: BD

• Question 27:

  A security network engineer must implement intrusion policies using the Cisco Firepower Management Center API.

  Which action does the engineer take to achieve the goal?

  A. Make a PATCH request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.

  B. Make a POST request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.

  C. Intrusion policies can be read but not configured using the Cisco Firepower Management Center API.

  D. Make a PUT request to the URI /api/fmc_config/v1/domain/{DOMAIN_UUID}/policy/intrusionpolicies.

  Correct Answer: C

• Question 28:

  Refer to the exhibit.

  

  A network operator wants to add a certain IP to a DMZ tag. Which code segment completes the script and achieves the goal?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 29:

  Which API is designed to give technology partners the ability to send security events from their platform/service/appliance within a mutual customer's environment to the Umbrella cloud for enforcement?

  A. Cisco Umbrella Management API

  B. Cisco Umbrella Security Events API

  C. Cisco Umbrella Enforcement API

  D. Cisco Umbrella Reporting API

  Correct Answer: C

• Question 30:

  If the goal is to create an access policy with the default action of blocking traffic, using Cisco Firepower Management Center REST APIs, which snippet is used?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D