Which two statements apply to authentication when using the Cisco Intersight API? (Choose two.)

Question

Options

• AEach API Key can be assigned specific roles but not privileges.
• BSecret Key is only available at API Key creation time.
• CAn API Key is composed of a Key ID and Secret Key.
• DThe user credentials for the cisco.com accounts are shared with the Cisco Intersight Web Server.
• EAn API Key is composed of a keyId and sessionCookie.

• A
  6% (2)
• B
  88% (28)
• D
  3% (1)
• E
  3% (1)

Explanation

Cisco Intersight API authentication uses a two-part API Key consisting of a Key ID and a Secret Key (C), which together are used to sign API requests via HTTP Signature authentication. The Secret Key is displayed only once at the moment of creation and is never retrievable again from the portal - lose it, and you must generate a new API Key entirely (B).

Why the distractors are wrong:

• A is incorrect because API Keys inherit the full permissions of the associated user account, including both roles and privileges - they are not independently scoped to roles only.
• D is incorrect because Intersight API authentication is specifically designed to avoid passing cisco.com account credentials; API Keys are the mechanism that replaces credential sharing.
• E is incorrect because sessionCookie is a web browser session concept - the API uses a keyId paired with a secretKey, not a cookie.

Memory tip: Think of the Secret Key like a password shown only once - just like many services show a generated password or token only at creation. The pair is Key ID + Secret Key, not ID + cookie (cookies live in browsers, not API clients).

No community discussion yet for this question.