Free 300-735 sample questions

Correct answer: An asynchronous pattern using a library like `asyncio` and `aiohttp` to send multiple requests concurrently.

For tasks involving many independent, I/O-bound operations like API calls, an asynchronous pattern is far more efficient. Libraries such as `asyncio` allow the script to send multiple requests concurrently without waiting for each one to complete. This significantly reduces the total execution time compared to a synchronous approach, which would be bottlenecked by network latency for each individual request.

Correct answers: python3 -m venv .venv; pip install -r requirements.txt

Correct answer: False

The statement is false. The FMC REST API modifies the configuration database on the FMC itself. Any changes made via the API, such as creating objects or modifying access policies, are staged. They do not take effect on the managed devices until a deployment task is initiated, either through the UI or via a separate API call.

Correct answer: POST /api/fmc_config/v1/domain/{domainUUID}/object/hosts

The correct endpoint to create network objects like hosts, networks, or ranges is within the object model of a specific domain. A POST request to `/api/fmc_config/v1/domain/{domainUUID}/object/hosts` with the appropriate JSON payload will create a new host object in the specified domain.

Correct answer: A PUT request to `/ers/config/endpoint/{id}` with a JSON payload containing the UUID of the 'Quarantined_Endpoints' group.

To update an existing resource in the ISE ERS API, a PUT request is used. First, the script must retrieve the unique ID of the endpoint (as shown in Step 2). Then, it sends a PUT request to the specific endpoint's resource URL (`/ers/config/endpoint/{id}`). The request body must contain the full object definition, including the `groupId` field updated with the UUID of the target identity group.

Correct answer: The script is using an incorrect domain UUID in the rule creation API call.

A common cause for this issue is a domain mismatch. Objects in FMC are scoped to a specific domain. If the script creates the network object in the Global domain but then tries to add a rule to a policy in a child domain (e.g., 'DomainA'), the API will return a 404 error because the object does not exist within the context of 'DomainA'. The API calls for both object creation and policy modification must use the same, correct domain UUID.

Correct answer: Enable pxGrid services on ISE and configure FMC as a pxGrid subscriber. Use the built-in ISE-FMC integration to have ISE publish IP-to-SGT mappings, which FMC subscribes to and uses for identity-based firewall policies.

This is the native, most efficient, and scalable solution designed by Cisco for this exact purpose. Cisco pxGrid (Platform Exchange Grid) provides a publish/subscribe messaging bus for security products to share context. By configuring ISE as a publisher of session information (including IP-to-SGT mappings) and FMC as a subscriber, the FMC receives near real-time updates. This allows the firewall to enforce SGT-based policies dynamically without the complexity and delay of polling or syslog parsing. This method is secure, highly scalable, and the intended best practice.

Correct answer: A publish/subscribe (pub/sub) messaging bus for sharing contextual information.

Cisco pxGrid is fundamentally a publish/subscribe messaging framework. Security products (like ISE) can act as 'publishers' of specific topics (like session information). Other products or custom scripts can act as 'subscribers' to receive real-time updates on those topics. This decoupled, event-driven architecture allows for scalable and efficient context sharing across a multi-vendor security ecosystem.

Correct answer: Establish a WebSocket connection to the SessionDirectory service node to subscribe for live updates.

The pxGrid 2.0 architecture uses WebSockets for subscriptions. After discovering the service node that provides the 'SessionDirectory' capability, the client must establish a persistent WebSocket connection to that node. Over this connection, it sends a subscribe message and then begins receiving real-time session events (creations, updates, deletions) as they occur.

Correct answer: Write a Python script that reads the CSV file line by line. For each line, the script should construct a JSON payload and send a POST request to the FMC REST API's accessrules endpoint.

This is a classic automation use case for the FMC API. A script (Python is common) can easily parse the CSV data. For each row, it can dynamically create the necessary network/port objects if they don't exist, and then construct the JSON payload for a new access rule. A POST request is then made for each rule. This approach is highly flexible, repeatable, and scalable.