Free Cisco 300-735 Practice Questions 2026 | Automating and Programming Cisco Security Solutions (300-735 SAUTO)

Which two destinations are supported by the Cisco Security Management Appliance reporting APIs? (Choose two.)

A. email

B. Microsoft Word file

C. FTP

D. web

E. csv file

Drag and drop the code to complete the curl query to the Cisco Umbrella Investigate API for the Latest Malicious Domains for the IP address 10.10.20.50. Not all options are used.

Which two URI parameters are needed for the Cisco Stealthwatch Top Alarm Host v1 API?
(Choose two.)

A. startAbsolute

B. externalGeos

C. tenantId

D. intervalLength

E. tagID

Which header set should be sent with all API calls to the Cisco Stealthwatch Cloud API?

A. Option A

B. Option B

C. Option C

D. Option D

Drag and drop the items to complete the ThreatGRID API call to return a curated feed of sinkholed-ip-dns in stix format. Not all options are used.

Refer to the exhibit.

A network operator must create a Python script that makes an API request to Cisco Umbrella to do a pattern search and return all matched URLs with category information. Which code completes the script?

A. URL = BASE_URL + "/find/exa\[a-z\]ple.com" PARAMS = { "categoryinclude" : "true"}

B. URL = BASE_URL + "/find/exa\[a-z\]ple.com" PARAMS = { "returncategory" : "true"}

C. URL = BASE_URL + "/find/exa\[a-z\]ple.com" PARAMS = { "includeCategory" : "true"}

D. URL = BASE_URL + "/find/exa\[a-z\]ple.com" PARAMS = { "returnCategory" : "true"}

Which snippet describes the way to create an URL object in Cisco FDM using FDM REST APIs with curl?

A. Option A

B. Option B

C. Option C

D. Option D

Refer to the exhibit.

The security administrator must temporarily disallow traffic that goes to a production web server using the Cisco FDM REST API. The administrator sends an API query as shown in the exhibit.
What is the outcome of that action?

A. The given code does not execute because the mandatory parameters, source, destination, and services are missing.

B. The given code does not execute because it uses the HTTP method "PUT". It should use the HTTP method "POST".

C. The appropriate rule is updated with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.

D. A new rule is created with the source, destination, services, and other fields set to "Any" and the action set to "DENY". Traffic to the production web server is disallowed, as expected.

Refer to the exhibit.

A network operator wants to add a certain IP to a DMZ tag. Which code segment completes the script and achieves the goal?

A. Option A

B. Option B

C. Option C

D. Option D

The Cisco Security Management Appliance API is used to make a GET call using the URI /sma/api/v2.0/ reporting/mail_incoming_traffic_summary/detected_amp?startDate=2016- 09- 10T19:00:00.000Z&endDate=2018-09- 24T23:00:00.000Z&device_type=esa&device_name=esa01.What does this GET call return?

A. values of all counters of a counter group, with the device group name and device type for web

B. value of a specific counter from a counter group, with the device name and type for email

C. value of a specific counter from a counter group, with the device name and type for web

D. values of all counters of a counter group, with the device group name and device type for email