Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Cisco 350-201 Exam - Topic 11 Question 53 Discussion

An analyst received multiple alerts on the SIEM console of users that are navigating to malicious URLs. The analyst needs to automate the task of receiving alerts and processing the data for further investigations. Three variables are available from the SIEM console to include in an automation script: console_ip, api_token, and reference_set_name. What must be added to this script to receive a successful HTTP response?#!/usr/bin/python import sys import requests
C) console_ip, api_token
A) {1}, {2}
B) {1}, {3}
D) console_ip, reference_set_name

Cisco 350-201 Exam - Topic 11 Question 53 Discussion

Actual exam question for Cisco's 350-201 exam
Question #: 53
Topic #: 11
[All 350-201 Questions]

An analyst received multiple alerts on the SIEM console of users that are navigating to malicious URLs. The analyst needs to automate the task of receiving alerts and processing the data for further investigations. Three variables are available from the SIEM console to include in an automation script: console_ip, api_token, and reference_set_name. What must be added to this script to receive a successful HTTP response?

#!/usr/bin/python import sys import requests

Show Suggested Answer Hide Answer
Suggested Answer: C

by Teri at Jun 14, 2022, 03:11 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Rutha
10 months ago
Is it really that simple? I thought there'd be more to it.
upvoted 0 times
...
Dick
10 months ago
Totally agree with C, makes the most sense!
upvoted 0 times
...
Elza
10 months ago
Wait, why would you need reference_set_name for a response?
upvoted 0 times
...
Julio
11 months ago
I think option C is the right choice!
upvoted 0 times
...
Craig
11 months ago
You definitely need console_ip and api_token for the HTTP request.
upvoted 0 times
...
Annabelle
11 months ago
I vaguely recall something about needing the console_ip and api_token together for the script to work, but I’m not completely confident.
upvoted 0 times
...
Zana
11 months ago
I’m a bit confused about this one. I thought we needed all three variables, but maybe we only need the first two for a successful response?
upvoted 0 times
...
Lovetta
11 months ago
I remember a practice question where we had to use API tokens for authentication, so I feel like option C might be the right choice.
upvoted 0 times
...
Rolf
11 months ago
I think we need to include the console_ip and api_token to authenticate the request, but I'm not entirely sure if reference_set_name is also necessary.
upvoted 0 times
...
Kerrie
11 months ago
Hmm, I'm not totally sure about this one. I'm thinking it could also be used to apply a non-identical service configuration to multiple CPEs, like option C. But I'm not 100% confident on that.
upvoted 0 times
...
Stefanie
11 months ago
Hmm, I'm a bit unsure about this one. Data aggregation could have a few different benefits, so I'll need to read the options closely to determine the main one.
upvoted 0 times
...
Adelaide
11 months ago
This is a tricky one. I'm not entirely sure about the relationship between the captain, the deployer, and the new search head. I'll need to review my notes on search head clustering to make sure I understand the correct sequence of steps.
upvoted 0 times
...

Save Cancel