What is the primary purpose of the registration token when installing a Cisco Secure Endpoint connector?

To authenticate the connector to the Secure Endpoint Console

To encrypt the communication between the connector and the endpoint

To enable the connector to download signature updates

To license the connector for a specific number of endpoints

A company is deploying Cisco Secure Endpoint to endpoints in a highly regulated environment where data cannot leave the country. The endpoints must still receive threat intelligence from the AMP cloud. What is the best way to meet this requirement?

Disable cloud lookup and rely on local signatures

Configure the connector to only send file hashes to the AMP cloud

Use a private cloud deployment of Cisco Secure Endpoint within the country

Use a proxy server to anonymize data before sending to the AMP cloud

A company is deploying Cisco Secure Endpoint to remote users who are often offline. The security team wants to ensure that endpoints still have protection when they are not connected to the corporate network. What should be configured?

Set the cloud lookup action to 'Block' for unknown files

Enable local signature updates and ensure the connector has the latest signatures

Disable the connector's local scanning

Configure the connector to use a proxy server

A company is deploying Cisco Secure Endpoint to 500 Windows laptops. The security team wants to ensure that any new executable file that is not yet seen by the AMP cloud is blocked from running until its reputation is determined. Which policy setting should be configured in the antimalware policy?

Configure the connector to use 'TETRA' scan mode

Set the 'Cloud Lookup' to 'Pass' for unknown files

Enable 'Quarantine' for all files that fail the signature scan

Set the file reputation check to 'Block' for unknown files

What is the primary advantage of using behavioral analysis in Cisco Secure Endpoint?

It eliminates the need for cloud connectivity

It uses less CPU than signature-based detection

It only detects malware that has been seen before

It can detect previously unknown malware based on its actions

CiscoCertified Network Professional Security

Domain 5Objective 5

5.5 Configure Endpoint Antimalware Protection Using Cisco Secure Endpoint 350-701 Practice Questions (Page 4)

Part of the Endpoint Protection and Detection domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

15%of the exam

Questions 16–20

16foundation · easy
What is the primary purpose of the registration token when installing a Cisco Secure Endpoint connector?
Select an answer first
17expert · hard
A company is deploying Cisco Secure Endpoint to endpoints in a highly regulated environment where data cannot leave the country. The endpoints must still receive threat intelligence from the AMP cloud. What is the best way to meet this requirement?
Select an answer first
18application · medium
A company is deploying Cisco Secure Endpoint to remote users who are often offline. The security team wants to ensure that endpoints still have protection when they are not connected to the corporate network. What should be configured?
Select an answer first
19application · medium
A company is deploying Cisco Secure Endpoint to 500 Windows laptops. The security team wants to ensure that any new executable file that is not yet seen by the AMP cloud is blocked from running until its reputation is determined. Which policy setting should be configured in the antimalware policy?
Select an answer first
20foundation · easy
What is the primary advantage of using behavioral analysis in Cisco Secure Endpoint?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.