A company wants to provide network access to contractors who are on-site for a week. The contractors should have internet-only access, and their access should expire automatically after seven days. Which solution best meets this requirement?

Device profiling with a persistent policy

Posture assessment with a compliance check

Guest services with a time-limited account

802.1X with a machine certificate

A company wants to provide Wi-Fi access to visitors in its lobby. The visitors should be able to access the internet but not internal resources. The company also wants to collect the visitor's email address and have them agree to the acceptable-use policy. Which solution should they implement?

Posture assessment with a compliance check

Guest services with a self-registration portal

Device profiling with a persistent policy

What is the primary goal of device profiling in a network access solution?

To block all devices that are not company-issued

To identify the type and characteristics of a device so that appropriate access policies can be applied

To encrypt all traffic from the device

To update the device's operating system

A company is implementing a NAC solution. They want to use the same identity store for both Wi-Fi authentication and VPN access. They also want to enforce posture checks on devices before granting VPN access. Which identity management approach should they use?

Use profiling for VPN authentication

Use guest services for VPN access

Use separate identity stores for Wi-Fi and VPN

Integrate with a central identity provider (e.g., Active Directory) and use posture assessment for VPN

Which component is typically responsible for authenticating a user's credentials and providing identity information to network access devices?

Intrusion prevention system (IPS)

CiscoCertified Network Professional Security

Domain 6Objective 1

6.1 Describe Identity Management and Secure Network Access Concepts Such as Guest Services, Profiling, Posture Assessment, and BYOD 350-701 Practice Questions (Page 1)

Part of the Network Access, Visibility, and Enforcement domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

5concepts

15%of the exam

Questions 1–5

1application · medium
A company wants to provide network access to contractors who are on-site for a week. The contractors should have internet-only access, and their access should expire automatically after seven days. Which solution best meets this requirement?
Select an answer first
2application · medium
A company wants to provide Wi-Fi access to visitors in its lobby. The visitors should be able to access the internet but not internal resources. The company also wants to collect the visitor's email address and have them agree to the acceptable-use policy. Which solution should they implement?
Select an answer first
3foundation · easy
What is the primary goal of device profiling in a network access solution?
Select an answer first
4expert · hard
A company is implementing a NAC solution. They want to use the same identity store for both Wi-Fi authentication and VPN access. They also want to enforce posture checks on devices before granting VPN access. Which identity management approach should they use?
Select an answer first
5foundation · easy
Which component is typically responsible for authenticating a user's credentials and providing identity information to network access devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.