In an endpoint posture assessment solution, what is the role of a policy?

To define the security requirements that endpoints must meet

To provide a user interface for the endpoint user

To encrypt all communication between the endpoint and the network

To block all inbound traffic to the endpoint

A company uses ISE for both VPN and wireless posture assessment. The security team notices that some VPN users are able to bypass posture assessment by disconnecting and reconnecting quickly. What is the most effective way to prevent this bypass?

Disable VPN access for users who fail posture

Require users to re-authenticate with MFA on every connection

Use a longer posture assessment timeout

Configure a minimum session duration before posture re-assessment is allowed

An organization uses ISE posture assessment for wired access. When a user plugs a laptop into the network, the posture agent runs and finds that the endpoint's operating system is missing critical patches. According to the posture policy, the endpoint should be placed in a remediation VLAN. What happens next in the posture assessment process?

The posture agent automatically installs the missing patches without user interaction

ISE disconnects the endpoint and requires a full re-authentication

ISE sends a CoA (Change of Authorization) to the switch to move the endpoint to the remediation VLAN

The switch blocks all traffic from the endpoint until the patches are installed

A company uses ISE posture assessment for both wired and wireless access. The security team wants to ensure that endpoints are re-evaluated periodically, not just at initial connection. Which ISE setting should be configured?

RADIUS interim accounting updates

MAC address bypass (MAB) for known devices

Periodic posture re-assessment interval

Session timeout on the network device

A hospital uses ISE posture assessment for its wired network. The security team wants to enforce that all endpoints have the latest antivirus definitions. However, they also want to allow a small group of legacy devices that cannot run the latest AV version to access a specific research network. What is the best way to handle this?

Block all legacy devices from the network

Allow all devices to access the research network without posture checks

Create a separate posture policy for the legacy devices that allows the older AV version

Use the same posture policy for all devices and quarantine non-compliant ones

CiscoCertified Network Professional Security

Domain 5Objective 3

5.3 Describe Endpoint Posture Assessment Solutions to Ensure Endpoint Security 350-701 Practice Questions (Page 5)

Part of the Endpoint Protection and Detection domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

15%of the exam

Questions 21–25

21foundation · easy
In an endpoint posture assessment solution, what is the role of a policy?
Select an answer first
22expert · hard
A company uses ISE for both VPN and wireless posture assessment. The security team notices that some VPN users are able to bypass posture assessment by disconnecting and reconnecting quickly. What is the most effective way to prevent this bypass?
Select an answer first
23application · medium
An organization uses ISE posture assessment for wired access. When a user plugs a laptop into the network, the posture agent runs and finds that the endpoint's operating system is missing critical patches. According to the posture policy, the endpoint should be placed in a remediation VLAN. What happens next in the posture assessment process?
Select an answer first
24application · medium
A company uses ISE posture assessment for both wired and wireless access. The security team wants to ensure that endpoints are re-evaluated periodically, not just at initial connection. Which ISE setting should be configured?
Select an answer first
25expert · hard
A hospital uses ISE posture assessment for its wired network. The security team wants to enforce that all endpoints have the latest antivirus definitions. However, they also want to allow a small group of legacy devices that cannot run the latest AV version to access a specific research network. What is the best way to handle this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

5.3 Describe Endpoint Posture Assessment Solutions to Ensure Endpoint Security 350-701 Practice Questions (Page 5)

Questions 21–25

In an endpoint posture assessment solution, what is the role of a policy?

A company uses ISE for both VPN and wireless posture assessment. The security team notices that some VPN users are able to bypass posture assessment by disconnecting and reconnecting quickly. What is the most effective way to prevent this bypass?

A company uses ISE posture assessment for both wired and wireless access. The security team wants to ensure that endpoints are re-evaluated periodically, not just at initial connection. Which ISE setting should be configured?

Keep studying — Endpoint Protection and Detection