A company wants to ensure that only devices with a compliant OS and a specific certificate can access the corporate network. They have Cisco ISE and want to use a method that does not require users to install any client software. Which ISE feature should they use?

MAC Authentication Bypass (MAB)

Agentless posture assessment via web redirect

How does application control typically identify applications on the network?

By checking the source MAC address of the packets

By relying solely on the destination IP address of the traffic

By inspecting traffic signatures and behavioral patterns, not just port numbers

By reading the application layer protocol from the TCP header

Which Cisco technology is specifically designed to provide application visibility and control at the network perimeter?

Cisco Next-Generation Firewall (NGFW)

Cisco AnyConnect Secure Mobility Client

Cisco Identity Services Engine (ISE)

A company wants to monitor and control the use of cloud storage applications like Dropbox and Google Drive. They have a Cisco Firepower NGFW. Which feature should they use to get visibility and control?

NetFlow to monitor traffic only

URL filtering to block cloud storage websites

Application Detectors to identify and control cloud storage apps

QoS to prioritize cloud storage traffic

A company uses Cisco ISE for network access control. They want to ensure that only corporate-issued laptops that have the latest OS patches and a specific certificate installed can access the corporate VLAN. The laptops are already enrolled in the company's MDM. Which ISE feature should be used to enforce this policy?

MAC Authentication Bypass (MAB) for device authentication

Profiling to identify the device type

Posture assessment with a compliance policy

RADIUS CoA to dynamically change the VLAN

CiscoCertified Network Professional Security

Domain 6Objective 2

6.2 Describe Device Compliance and Application Control 350-701 Practice Questions (Page 1)

Part of the Network Access, Visibility, and Enforcement domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

3concepts

15%of the exam

Questions 1–5

1application · medium
A company wants to ensure that only devices with a compliant OS and a specific certificate can access the corporate network. They have Cisco ISE and want to use a method that does not require users to install any client software. Which ISE feature should they use?
Select an answer first
2foundation · easy
How does application control typically identify applications on the network?
Select an answer first
3foundation · easy
Which Cisco technology is specifically designed to provide application visibility and control at the network perimeter?
Select an answer first
4application · medium
A company wants to monitor and control the use of cloud storage applications like Dropbox and Google Drive. They have a Cisco Firepower NGFW. Which feature should they use to get visibility and control?
Select an answer first
5application · medium
A company uses Cisco ISE for network access control. They want to ensure that only corporate-issued laptops that have the latest OS patches and a specific certificate installed can access the corporate VLAN. The laptops are already enrolled in the company's MDM. Which ISE feature should be used to enforce this policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.