Exam 300-735 topic 1 question 58 discussion

Actual exam question from Cisco's 300-735

Question #: 58
Topic #: 1

DRAG DROP -
Drag and drop the items to complete the curl request to the ThreatGRID API. The API call should request the first 10 IP addresses that ThreatGRID saw samples communicate with during analysis, in the first two hours of January 18
(UTC time), where those communications triggered a Behavior Indicator that had a th confidence equal to or higher than 75 and a severity equal to or higher than 95.
Select and Place:

Show Suggested Answer

Suggested Answer:

Reference:
https://support.umbrella.com/hc/en-us/articles/231248768-Cisco-Umbrella-Cisco-AMP-Threat-Grid-Cloud-Integration-Setup-Guide

by JacobTao at Sept. 5, 2020, 3:51 a.m.

Comments

Submit Cancel

hatsec

9 months, 2 weeks ago

Correct answer: https://panacea.threatgrid.com/api/v2/iocs/feeds/ips?limit=10&after=2018-01-18T00:00:00&before=2018-01-18T02:00:00&confidence=75&severity=75

upvoted 1 times

...

python_tamer

2 years, 1 month ago

Here is where the question came from with the correct formatting of the dates! https://blogs.cisco.com/security/demystifying-the-api-using-threat-grid-as-an-example

upvoted 3 times

...

JacobTao

3 years, 2 months ago

the first two hours of January 18(UTC time). Should be after 01/18/2018 00:00:00 and before 01/18/2018 02:00:00

upvoted 2 times

Hitter18

2 years, 10 months ago

except the years are 2018 and 2019