• 4.9/5.0
  • 60 Questions
  • Updated on: 25-May-2026
  • Automating and Programming Cisco Security Solutions (300-735 SAUTO)
  • 2605 Prepared

Free Cisco 300-735 Practice Questions 2026 | Automating and Programming Cisco Security Solutions (300-735 SAUTO)


Drag and drop the code to complete the script to search Cisco ThreatGRID and return all public submission records associated with cisco.com. Not all options are used.


Which two commands create a new local source code branch? (Choose two.)

A. git checkout -b new_branch

B. git branch -b new_branch

C. git checkout -f new_branch

D. git branch new_branch

E. git branch -m new_branch

A.   git checkout -b new_branch
D.   git branch new_branch

Refer to the exhibit.

A security engineer attempts to query the Cisco Security Management appliance to retrieve details of a specific message. What must be added to the script to achieve the desired result?

A. Add message ID information to the URL string as a URI.

B. Run the script and parse through the returned data to find the desired message.

C. Add message ID information to the URL string as a parameter.

D. Add message ID information to the headers.

C.   Add message ID information to the URL string as a parameter.

If the goal is to create an access policy with the default action of blocking traffic, using Cisco Firepower Management Center REST APIs, which snippet is used?

A. Option A

B. Option B

C. Option C

D. Option D

D.   Option D

Refer to the exhibit.

A Python function named "query" has been developed and the goal is to use it to query the service "com.cisco.ise.session" via Cisco pxGrid 2.0 APIs. How is the function called, if the goal is to identify the sessions that are associated with the IP address 10.0.0.50?

A. query(config, secret, "getSessionByIpAddress/10.0.0.50", "ipAddress")

B. query(config, "10.0.0.50", url, payload)

C. query(config, secret, url, "10.0.0.50")

D. query(config, secret, url, '{"ipAddress": "10.0.0.50"}')

D.   query(config, secret, url, '{"ipAddress": "10.0.0.50"}')

Which request searches for a process window in Cisco ThreatGRID that contains the word “secret”?

A. /api/v2/search/submissions?term=processwindow&title=secret

B. /api/v2/search/submissions?term=processwindow&q=secret

C. /api/v2/search/submissions?term=window&title=secret

D. /api/v2/search/submissions?term=process&q=secret

D.   /api/v2/search/submissions?term=process&q=secret

Refer to the exhibit.

A network operator must generate a daily flow report and learn how to act on or manipulate returned data. When the operator runs the script, it returns an enormous amount of information. Which two actions enable the operator to limit returned data? (Choose two.)

A. Add recordLimit. followed by an integer (key:value) to the flow_data.

B. Add a for loop at the end of the script, and print each key value pair separately.

C. Add flowLimit, followed by an integer (key:value) to the flow_data.

D. Change the startDateTime and endDateTime values to include smaller time intervals.

E. Change the startDate and endDate values to include smaller date intervals.

A.   Add recordLimit. followed by an integer (key:value) to the flow_data.
B.   Add a for loop at the end of the script, and print each key value pair separately.

What is the purpose of the snapshot APIs exposed by Cisco Stealthwatch Cloud?

A. Report on flow data during a customizable time period.

B. Operate and return alerts discovered from infrastructure observations.

C. Return current configuration data of Cisco Stealthwatch Cloud infrastructure.

D. Create snapshots of supported Cisco Stealthwatch Cloud infrastructure.

B.   Operate and return alerts discovered from infrastructure observations.

For which two programming languages does Cisco offer an SDK for Cisco pxGrid 1.0? (Choose two.)

A. Python

B. Perl

C. Java

D. C

E. JavaScript

C.   Java
D.   C

Drag and drop the items to complete the curl request to the ThreatGRID API. The API call should request the first 10 IP addresses that ThreatGRID saw samples communicate with during analysis, in the first two hours of January 18th (UTC time), where those communications triggered a Behavior Indicator that had a confidence equal to or higher than 75 and a severity equal to or higher than 95.


Page 2 out of 6 Pages
123