A hospital network uses Cisco ISE for wired and wireless access control. The security team wants to ensure that only managed Windows laptops with up-to-date antivirus definitions and a running host firewall can reach the internal EHR system. Which ISE feature should the team enable to evaluate these endpoint attributes before granting network access?

RADIUS accounting with interim updates

TrustSec security group tags (SGTs)

Posture assessment with a compliance module

MAC authentication bypass (MAB)

A security team is configuring ISE posture assessment for a network with both managed and unmanaged endpoints. The managed endpoints have the AnyConnect posture module installed, while unmanaged endpoints do not. The team wants to enforce posture on managed endpoints but allow unmanaged endpoints to access a guest network with limited internet access. What is the best approach?

Use the same posture policy for all endpoints and quarantine non-compliant ones

Disable posture assessment for all endpoints

Force all endpoints to install the posture agent before network access

Use different authorization policies based on the presence of the posture agent

Which Cisco product acts as a central policy server for endpoint posture assessment?

Cisco Web Security Appliance (WSA)

Cisco Adaptive Security Appliance (ASA)

Cisco Identity Services Engine (ISE)

What is the primary purpose of endpoint posture assessment in an enterprise network?

To evaluate the security state of endpoints before granting network access

To encrypt all data transmitted between endpoints and servers

To automatically patch all software vulnerabilities on endpoints

To continuously monitor network traffic for malicious signatures

A company wants to integrate endpoint posture assessment with their existing VPN solution. The VPN gateway is a Cisco ASA. The security team wants to enforce posture before allowing full VPN access. What is the recommended integration approach?

Configure the ASA to perform deep packet inspection on VPN traffic

Use AnyConnect with posture and configure the ASA to enforce the posture result

Use IPsec without AnyConnect for VPN access

Use a separate RADIUS server for VPN authentication only

CiscoCertified Network Professional Security

Domain 5Objective 3

5.3 Describe Endpoint Posture Assessment Solutions to Ensure Endpoint Security 350-701 Practice Questions (Page 1)

Part of the Endpoint Protection and Detection domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

15%of the exam

Questions 1–5

1application · medium
A hospital network uses Cisco ISE for wired and wireless access control. The security team wants to ensure that only managed Windows laptops with up-to-date antivirus definitions and a running host firewall can reach the internal EHR system. Which ISE feature should the team enable to evaluate these endpoint attributes before granting network access?
Select an answer first
2expert · hard
A security team is configuring ISE posture assessment for a network with both managed and unmanaged endpoints. The managed endpoints have the AnyConnect posture module installed, while unmanaged endpoints do not. The team wants to enforce posture on managed endpoints but allow unmanaged endpoints to access a guest network with limited internet access. What is the best approach?
Select an answer first
3foundation · easy
Which Cisco product acts as a central policy server for endpoint posture assessment?
Select an answer first
4foundation · easy
What is the primary purpose of endpoint posture assessment in an enterprise network?
Select an answer first
5application · medium
A company wants to integrate endpoint posture assessment with their existing VPN solution. The VPN gateway is a Cisco ASA. The security team wants to enforce posture before allowing full VPN access. What is the recommended integration approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

5.3 Describe Endpoint Posture Assessment Solutions to Ensure Endpoint Security 350-701 Practice Questions (Page 1)

Questions 1–5

Which Cisco product acts as a central policy server for endpoint posture assessment?

What is the primary purpose of endpoint posture assessment in an enterprise network?

A company wants to integrate endpoint posture assessment with their existing VPN solution. The VPN gateway is a Cisco ASA. The security team wants to enforce posture before allowing full VPN access. What is the recommended integration approach?

Keep studying — Endpoint Protection and Detection