What is the primary function of Cisco Firepower Management Center (FMC)?

To provide identity-based network access control for endpoints connecting to the network

To provide centralized management, monitoring, and policy configuration for multiple Firepower NGFW devices

To perform sandboxing of suspicious files before they reach the network

To act as a web proxy that filters outbound HTTPS traffic

A network administrator wants to automatically quarantine a switch port when ISE detects a non-compliant device. The switch is a Cisco Catalyst switch. Which approach should they use?

Use the Firepower API to block the device's IP address

Configure ISE to use RADIUS CoA to change the access policy on the switch port

Use Umbrella to block the device's DNS

Use Secure Endpoint to isolate the device

What is a common use case for using the Cisco Umbrella API?

To programmatically manage DNS security policies and retrieve security event data

To perform sandboxing of suspicious files

To enforce network access control policies for endpoints

To configure firewall rules on a Firepower NGFW

A company uses Cisco Umbrella for DNS-layer security. They want to automate the retrieval of DNS query logs for a specific internal network segment and store them in a SIEM. The SIEM vendor requires logs in JSON format. Which API endpoint and data format should they use?

Umbrella Management API with CSV response

Umbrella Enforcement API with XML response

Umbrella Reporting API with JSON response

Umbrella Investigate API with JSON response

A security team is evaluating how to improve their incident response process. They currently use Secure Endpoint for endpoint detection and Secure Malware Analytics for file analysis. They want to reduce the time it takes to investigate alerts by automatically correlating endpoint alerts with sandbox analysis results. Which approach best achieves this?

Use Secure Endpoint's built-in sandboxing feature

Integrate both products with Cisco XDR to automate correlation

Use Umbrella to correlate the data

Manually copy analysis results from Threat Grid into Secure Endpoint

CiscoCertified Network Associate Automation (CCNA Automation)

Domain 3Objective 5

5. Describe the Capabilities of Cisco Security Platforms and APIs (XDR, Firepower, Umbrella, Secure Endpoint, ISE, and Secure Malware Analytics) 200-901 Practice Questions (Page 8)

Part of the 3.0 Cisco Platforms and Development domain, which accounts for 15% of the 200-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

15%of the exam

Questions 36–40

36foundation · easy
What is the primary function of Cisco Firepower Management Center (FMC)?
Select an answer first
37expert · hard
A network administrator wants to automatically quarantine a switch port when ISE detects a non-compliant device. The switch is a Cisco Catalyst switch. Which approach should they use?
Select an answer first
38foundation · easy
What is a common use case for using the Cisco Umbrella API?
Select an answer first
39expert · hard
A company uses Cisco Umbrella for DNS-layer security. They want to automate the retrieval of DNS query logs for a specific internal network segment and store them in a SIEM. The SIEM vendor requires logs in JSON format. Which API endpoint and data format should they use?
Select an answer first
40expert · hard
A security team is evaluating how to improve their incident response process. They currently use Secure Endpoint for endpoint detection and Secure Malware Analytics for file analysis. They want to reduce the time it takes to investigate alerts by automatically correlating endpoint alerts with sandbox analysis results. Which approach best achieves this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-901” is a trademark of its owner, used for identification only.