Construct API Requests to Create and Delete Objects Using Firepower Device Management (FDM) 350-901 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An engineer is building a script that will create and delete objects on an FDM-managed device. They want to ensure the script handles token expiration gracefully. What is the best practice?

   • AInclude the username and password in every request instead of a token
   • BCheck the response for a 401 status and re-authenticate to obtain a new token, then retry the request
   • CRefresh the token by sending a GET request to the token endpoint
   • DUse the same token indefinitely because FDM tokens do not expire
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An engineer is writing a script to authenticate to the FDM API. They have the FDM base URL and credentials. Which of the following is the correct way to construct the Basic authentication header?

   • ASet the Authorization header to 'Basic username:password' without encoding
   • BSet the Authorization header to 'Bearer username:password'
   • CBase64 encode the username and password separately and concatenate them with a colon in the Authorization header
   • DBase64 encode the string 'username:password' and set it as the value of the Authorization header with the prefix 'Basic '
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security team requires that all API automation use short-lived tokens to minimize the impact of token leakage. The FDM API token expires after 30 minutes. The team wants to run a long batch job that creates hundreds of objects and may take over an hour. What is the best approach?

   • AObtain a new token before each request or when a 401 is received, and continue the batch job
   • BUse the same token for the entire job and hope it does not expire
   • CSplit the job into smaller chunks, each under 30 minutes, and obtain a new token for each chunk
   • DRequest a token with a longer expiration time by setting a parameter in the authentication request
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A DevOps engineer is writing a script to create a network object for a subnet 10.20.30.0/24. They have obtained a token and stored it in a variable. Which of the following is the correct way to include the token in the POST request?

   • AAdd the token as a query parameter named 'access_token'
   • BAdd an Authorization header with the value 'Bearer <token>'
   • CAdd the token in the JSON body under the 'token' field
   • DAdd a cookie named 'auth_token' with the token value
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An engineer is automating the replacement of a deprecated network object with a new one. The script must create the new object, update all references to point to the new object, and then delete the old object. The script receives a 409 Conflict when trying to delete the old object. What is the most likely reason?

   • AThe API token expired during the operation
   • BThe old object is still referenced by some configuration that was not updated
   • CThe new object was not created successfully
   • DThe old object ID is incorrect
   Reveal Solution Discussion Select an answer first