Automating Cisco Security Solutions (300-735) SAUTO Exam Guide

Automating Cisco Security Solutions (300-735) SAUTO Exam Guide

Automating Cisco Security Solutions v1.1 (300-735)

Exam Overview: The Automating Cisco Security Solutions v1.1 (SAUTO 300-735) exam, part of the CCNP Security and DevNet Professional Certifications, is a 90-minute test. It evaluates a candidate’s knowledge of implementing automated security solutions, covering programming concepts, RESTful APIs, data models, protocols, firewalls, web, DNS, cloud, email security, and ISE. The course, Implementing Automation for Cisco Security Solutions, prepares candidates for this exam.

The listed topics are general guidelines for the exam content. Other related topics may also appear in specific exam versions. Guidelines may change at any time for clarity and accuracy.

1.0 Network Programmability Foundation (10%) 1.1 Use common version control operations with git (add, clone, push, commit, diff, branching, and merging conflict). 1.2 Describe characteristics of API styles (REST and RPC). 1.3 Describe challenges and patterns encountered when consuming APIs synchronously and asynchronously. 1.4 Interpret Python scripts containing data types, functions, classes, conditions, and looping. 1.5 Describe the benefits of Python virtual environments. 1.6 Explain the benefits of using network configuration tools such as Ansible and Terraform for automating security platforms.

2.0 Network Security (35%) 2.1 Describe the event streaming capabilities of Cisco Secure Firewall Management Center (formerly Firepower Management Center) eStreamer API. 2.2 Describe the capabilities and components of these APIs:

  • Cisco Secure Firewall Management Center and Cisco Secure Firewall Device Manager
  • Cisco Identity Services Engine (ISE)
  • pxGRID
  • Cisco Secure Network Analytics (formerly Stealthwatch) Enterprise 2.3 Implement firewall objects, rules, intrusion policies, and access policies using Cisco Secure Firewall Management Center API. 2.4 Implement firewall objects, rules, intrusion policies, and access policies using Cisco Secure Firewall Device Manager API. 2.5 Construct a Python script for pxGrid to retrieve information such as endpoint device type, network policy, and security telemetry. 2.6 Construct API requests using Cisco Secure Network Analytics API:
  • Perform configuration modifications
  • Generate rich reports

3.0 Advanced Threat & Endpoint Security (30%) 3.1 Describe the capabilities and components of these APIs:

  • Cisco Cloud Security APIs (such as Umbrella APIs, Investigate APIs)
  • Cisco Secure Endpoint (formerly AMP for Endpoints) API
  • Cisco Secure Malware Analytics (formerly ThreatGRID) API
  • Cisco XDR solution APIs (such as SecureX API and Threat Response API) 3.2 Construct an Umbrella Investigate API request. 3.3 Construct Cisco Secure Endpoint API requests for events, computers, and policies. 3.4 Construct Cisco Secure Malware Analytics API requests for search, sample feeds, IoC feeds, and threat disposition. 3.5 Construct Cisco XDR solution API calls. 3.6 Describe the orchestration capabilities of Cisco XDR solution.

4.0 Cloud, Web, and Email Security (25%) 4.1 Describe the capabilities and components of these APIs:

  • Umbrella APIs
  • Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) APIs
  • Cisco Secure Email and Web Manager (formerly Security Management Appliance) APIs 4.2 Construct Secure Cloud Analytics API requests for reporting. 4.3 Construct an Umbrella API request for Reports and Policies. 4.4 Construct a report using Secure Email and Web Manager API request.

Related Articles

Responses

Your email address will not be published. Required fields are marked *

🚀Unlock Lifetime Access For Just $49
This is default text for notification bar