Question

A security engineer is reviewing a colleague's Python script that automates policy retrieval from a Cisco Secure Firewall Management Center (FMC). The relevant lines are:

import requests
resp = requests.post('https://fmc.example.com/api/fmc_platform/v1/auth/generatetoken', auth=('admin','C1sco123'), verify=False)
token = resp.headers['X-auth-access-token']
headers = {'X-auth-access-token': token}
data = requests.get('https://fmc.example.com/api/fmc_config/v1/domain/xxxx/policy/accesspolicies', headers=headers, verify=False)

What is the primary purpose of the first POST request in this workflow?

Accepted Answer

It authenticates with credentials and retrieves an access token that must be passed in headers for subsequent API calls

Answer

It creates a new access control policy named 'generatetoken' on the FMC

Answer

It permanently disables TLS certificate validation for all future sessions to the FMC

Answer

It uploads the admin password hash so the FMC can store a persistent API key on disk