Which of the following is a common endpoint security control used to prevent unauthorized software from running on a host?

Intrusion detection system (IDS)

How does endpoint security integrate with network security to provide visibility?

By replacing network firewalls with endpoint software

By sharing endpoint telemetry with network monitoring systems

By blocking all network traffic from endpoints

By encrypting all network traffic to hide endpoint activity

What is a common method for network security to enforce policy based on endpoint security status?

Using endpoint security to configure network routers

Having endpoints directly block network traffic at the switch level

Network access control (NAC) checking endpoint compliance before granting access

Using a VPN to enforce all endpoint policies

What type of access control does Cisco TrustSec primarily provide?

Role-based access control (RBAC)

IP address-based access control

MAC address-based access control

A company is replacing its legacy firewall with a next-generation firewall (NGFW). The security team wants to enable SSL/TLS inspection to detect threats hidden in encrypted traffic. What is a key consideration when deploying SSL/TLS inspection?

SSL/TLS inspection requires a separate SSL decryptor device.

SSL/TLS inspection only works for outbound traffic, not inbound traffic.

SSL/TLS inspection can be enabled without any performance impact because modern NGFWs use hardware acceleration.

The NGFW must be able to decrypt and re-encrypt traffic, which requires installing a trusted CA certificate on client devices.

CiscoCertified Network Professional Enterprise

Domain 5Objective 4

5.4 Describe the Components of Network Security Design 350-401 Practice Questions (Page 3)

Part of the 5.0 Security domain, which accounts for 20% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 3–4 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

13concepts

20%of the exam

Questions 11–15

11foundation · easy
Which of the following is a common endpoint security control used to prevent unauthorized software from running on a host?
Select an answer first
12foundation · easy
How does endpoint security integrate with network security to provide visibility?
Select an answer first
13foundation · easy
What is a common method for network security to enforce policy based on endpoint security status?
Select an answer first
14foundation · easy
What type of access control does Cisco TrustSec primarily provide?
Select an answer first
15application · medium
A company is replacing its legacy firewall with a next-generation firewall (NGFW). The security team wants to enable SSL/TLS inspection to detect threats hidden in encrypted traffic. What is a key consideration when deploying SSL/TLS inspection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.