Cisco Security APIs Flashcards

1
Q

What are the four Cisco Umbrella APIs?

A

Umbrella Investigate API, Umbrella Enforcement API, Umbrella Management API, Umbrella Reporting API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the Cisco Umbrella Investigate API Base URL?

A

https://investigate.api.umbrella.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the Cisco Umbrella Enforcement API Base URL?

A

https://s-platform.api.opendns.com/1.0/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the Cisco Umbrella Reporting API Base URL?

A

https://reports.api.umbrella.com/v1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What type of authorization method does Cisco Umbrella Reporting API use?

A

Basic Auth with proprietary API Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What type of authorization method does Cisco Umbrella Management API use?

A

Basic Auth with proprietary API Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What type of authorization method does Cisco Umbrella Investigate API use?

A

Oauth2.0 “Bearer Token”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What type of authorization method does Cisco Umbrella Enforcement API use?

A

Oauth2.0 “Bearer Token”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the base URL for the Cisco Content Security Management Appliance (SMA) API?

A

https://{appliance}:{port}/sma/api/v2.0/{resource}/{resource attributes}

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the default port for the Cisco Content Security Management Appliance (SMA) API?

A

6080

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which authentication method does the Cisco Content Security Management Appliace (SMA) use?

A

JSON web token generated using an initial call with username and password.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A. When was this Study Deck Generated? B. When is the new version of the Cisco SAUT 300-735 exam being released?

A

A. June 20 2023 B. Mid July 2023

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Name four Cisco Stealthwatch Enterprise APIs!

A

Cisco Stealthwatch Reporting API v1, Cisco Stealthwatch Reporting API v2, Cisco Stealthwatch User Management API, and Cisco Configuration Management API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the base URL for the Cisco Stealthwatch Reporting API v1?

A

https://{device hostname or IP}/sw-reporting/v1/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the base URL for the Cisco Stealthwatch Reporting API v2?

A

https://{device hostname or IP}/sw-reporting/v2/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the base URL for the Cisco Stealthwatch Configuration Management API?

A

https://{device hostname or IP}/smc-configuration/rest/v1/

17
Q

What are the Supported REST Methods for Cisco Stealthwatch APIs?

A

CRUD - CREATE:POST, READ:GET, UPDATE:PUT, DELETE:DELETE

18
Q

What is the Authorization method used for Cisco Stealthwatch Enterprise APIs?

A

A session cookie is generated by an authenticated token call. (Username and password is passed in the initial call)

19
Q

What is the base URL for the Cisco Stealthwatch Cloud API?

A

https://{{cloud_host}}/api/v3/

20
Q

What is the Authentication method for the Cisco Stealthwatch Cloud API?

A

Apikey “{{cloud_email}}:{{cloud_api_key}}

21
Q

What are the supported REST Methods of the Cisco Stealthwatch Cloud API?

A

CRUD:
- READ - GET
- CREATE - POST
- UPDATE - PUT
- DELETE - DELETE

22
Q

What is the base URL for the Cisco FMC REST API?

A

https://{{fmc}}/api/fmc_platform/v1/

23
Q

What is the purpose of the Cisco Firepower Management Center (FMC) eStreamer API?

A

The Cisco Firepower Management Center eStreamer API is a network security interface designed to provide external software applications and devices with access to Cisco Firepower Management Center (FMC) event data, such as alerts, connection logs, and intrusion events. The API enables security administrators to integrate FMC event information into their existing third-party security monitoring systems or custom applications for efficient operation and synergy.

The eStreamer API allows real-time streaming of event information to increase situational awareness and improve overall network security. It uses a TLS-secured connection and Protocol Buffers for efficient data serialization, ensuring a reliable and secure communication channel.

24
Q

What are the supported REST methods for the Cisco Firepower Management Center (FMC) REST API?

A

CRUD
- GET - READ
- PUT - UPDATE
- POST - CREATE
- DELETE - DELETE

25
Q

What is the Authorization method for the Cisco Firepower Management Center REST API?

A

Token Authentication (X-Auth-Access-Token) (proprietary token)

26
Q

What is the base URL for the Cisco Firepower Threat Defense Firepower Device Manager (FDM) API?

A

https://{{ftd}}/api/fdm/latest (latest is an integer that changes with each new major release)

27
Q

What authentication method does Cisco Firepower Threat Defense Firepower Device Manager (FDM) API Use?

A

Oauth2.0 “Bearer Tokens”

28
Q

Name the three main Cisco ISE APIs

A
  • ERS (External RESTful Services)
  • MnT (Monitoring API)
  • pxGrid 2.0
29
Q

On which port does the Cisco ISE pxGrid 2.0 function?

A

8910

30
Q

On which port does the Cisco ISE ERS (External RESTful Services) API function?

A

9060

31
Q

On which port does the Cisco ISE MnT (Monitoring) API function?

A

443

32
Q

What is the base URL for the Cisco ISE ERS (External RESTful Services) API?

A

https://{{ise_host}}:9060/ers/

33
Q

What is the base URL for the Cisco ISE MnT (Monitoring) API?

A

https://{{ise_host}}/admin/API/mnt/

34
Q

What is the base URL for the Cisco ISE pxGrid 2.0 API?

A

https://{{ise_host}}:8910/pxgrid

35
Q

What is the base URL for the Cisco Threatgrid API?

A

https://panacea.threatgrid.com/api/v[23]/

36
Q

What Authorization method is used for the Cisco Threatgrid API?

A

api_key

37
Q

What are the supported REST methods of the Cisco Threatgrid API?

A

CRUD:
- POST - CREATE
- GET - READ
- PUT - UPDATE
- DELETE - DELETE

38
Q

What is the base URL for the Cisco AMP for endpoints API?

A

https://api.amp.cisco.com/v1/

39
Q

What authorization method does the Cisco AMP for endpoints API use?

A

Basic, A client ID with a Generated API key