nerdexam
Cisco

350-701 · Question #683

Refer to the exhibit. Which task is the Python script performing by using the Umbrella Enforcement API?

The correct answer is B. importing malicious domains to Cisco Umbrella Enforcement for blocking. The Python script is utilizing the Umbrella Enforcement API to import malicious domains, specifically to add them to a block list, thereby preventing access to those domains for users protected by Cisco Umbrella.

Submitted by stefanr· Mar 30, 2026Security Operations and Orchestration

Question

Refer to the exhibit. Which task is the Python script performing by using the Umbrella Enforcement API?

Exhibit

350-701 question #683 exhibit

Options

  • Aimporting malicious domains to Cisco Umbrella Enforcement for additional processing
  • Bimporting malicious domains to Cisco Umbrella Enforcement for blocking
  • Cediting malicious domains in Cisco Umbrella Enforcement that have changed status
  • Dediting malicious domains in Cisco Umbrella Enforcement that have changed IP address

How the community answered

(53 responses)
  • A
    8% (4)
  • B
    79% (42)
  • C
    4% (2)
  • D
    9% (5)

Why each option

The Python script is utilizing the Umbrella Enforcement API to import malicious domains, specifically to add them to a block list, thereby preventing access to those domains for users protected by Cisco Umbrella.

Aimporting malicious domains to Cisco Umbrella Enforcement for additional processing

While domains are imported, the primary purpose of adding them to the Enforcement API is typically for blocking or explicit allowance, not just 'additional processing' without a specified outcome.

Bimporting malicious domains to Cisco Umbrella Enforcement for blockingCorrect

The Umbrella Enforcement API is designed to allow security platforms and applications to programmatically add domains to an organization's block list. The script likely sends a list of 'malicious domains' to this API, which then ensures that Umbrella policies enforce blocking for these domains, making 'importing malicious domains for blocking' the correct task.

Cediting malicious domains in Cisco Umbrella Enforcement that have changed status

The Enforcement API is primarily for *adding* or *removing* domains from block/allow lists; 'editing malicious domains that have changed status' is vague and doesn't directly describe the enforcement action.

Dediting malicious domains in Cisco Umbrella Enforcement that have changed IP address

The Umbrella Enforcement API operates on domain names (FQDNs), not directly on IP addresses for blocking; DNS-layer security primarily blocks based on domain resolution or categorization.

Concept tested: Cisco Umbrella Enforcement API usage

Source: https://docs.umbrella.com/umbrella-api/docs/enforcement-api

Topics

#Umbrella Enforcement API#Python automation#malicious domain blocking#API integration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 350-701 Practice