Question 17 of 32 from exam 300-735-SAUTO: Automating and Programming Cisco Security Solutions

CE.

The Cisco Stealthwatch Top Alarm Host v1 API is a RESTful API that allows users to retrieve information about the hosts that generate the highest number of alarms within a specified time interval. To use this API, you must provide certain URI parameters. The following are brief explanations of the five options provided in the question:

A. startAbsolute: This parameter specifies the start time for the alarm data in the format of YYYY-MM-DDTHH:MM:SSZ. This parameter is required.

B. externalGeos: This parameter specifies an external Geolocation service that is used to map the IP addresses of the hosts to their physical locations. This parameter is optional.

C. tenantId: This parameter specifies the ID of the tenant in the Cisco Stealthwatch system. This parameter is optional.

D. intervalLength: This parameter specifies the length of the time interval for which the alarm data is retrieved. This parameter is required.

E. tagID: This parameter specifies a tag ID that can be used to filter the alarm data based on specific host attributes. This parameter is optional.

Therefore, the correct answer to the question would be A (startAbsolute) and D (intervalLength), since these two parameters are required to retrieve the data using this API.