What is the primary purpose of a threat defense architecture in an enterprise network?

To detect, prevent, and respond to security threats across the network

To provide a single point of failure for network security monitoring

To ensure that all network traffic is encrypted end-to-end

To replace all other security controls with a single integrated solution

A company has deployed an EDR solution on all endpoints. The security team wants to automatically isolate an infected endpoint from the network without manual intervention. The EDR solution supports integration with the company's NAC solution. What is the best way to achieve automated isolation?

Configure the NAC to periodically scan endpoints for threats and isolate them if found.

Configure the EDR console to trigger a NAC policy change that places the endpoint into a quarantine VLAN when a high-severity alert is raised.

Use the EDR console to send an email to the security team for manual isolation.

Configure the EDR agent to block all network traffic locally on the endpoint.

How does Cisco TrustSec propagate security group tags across the network?

By using the SGT Exchange Protocol (SXP)

By embedding tags in the IP header

What is the primary function of endpoint detection and response (EDR) technology?

To replace the need for antivirus software on endpoints

To continuously monitor endpoint activity and provide detailed visibility for incident response

To encrypt all data stored on the endpoint

To block all network traffic to and from the endpoint

CiscoCertified Network Professional Enterprise

Domain 5Objective 4

5.4 Describe the Components of Network Security Design 350-401 Practice Questions (Page 11)

Part of the 5.0 Security domain, which accounts for 20% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 3–4 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

13concepts

20%of the exam

Questions 51–55

51foundation · easy
What is the primary purpose of a threat defense architecture in an enterprise network?
Select an answer first
52expert · hard
A company has deployed an EDR solution on all endpoints. The security team wants to automatically isolate an infected endpoint from the network without manual intervention. The EDR solution supports integration with the company's NAC solution. What is the best way to achieve automated isolation?
Select an answer first
53foundation · easy
How does Cisco TrustSec propagate security group tags across the network?
Select an answer first
54foundation · easy
What type of traffic does MACsec protect?
Select an answer first
55foundation · easy
What is the primary function of endpoint detection and response (EDR) technology?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.