A company is planning a BYOD initiative. They want to allow personal devices to access corporate resources, but they also want to separate personal and corporate data on the device. Which approach is most appropriate?

Full device wipe on non-compliance

A company wants to automatically detect when an employee connects a personal IoT device (e.g., a smart speaker) to the corporate network. They want to block such devices from accessing the network. Which feature should they use?

Device profiling with policy enforcement

A company wants to automatically detect when an employee connects a personal router to the corporate network, which is against policy. They want to block the router and notify the security team. Which feature should they use?

Device profiling with an alert and block policy

What is the primary purpose of posture assessment in network access?

To verify that a device meets security requirements before it is allowed onto the network

To assign an IP address to the device

To determine the physical location of the device

To encrypt all traffic from the device

A company wants to automatically detect and classify all devices on the network, including IoT devices like cameras and sensors. They want to apply different security policies based on the device type. However, they also want to ensure that unknown devices are denied access by default. Which approach should they use?

Posture assessment with a compliance check

Guest services with a registration portal

MAC address authentication with a whitelist

Profiling with a default-deny policy for unknown devices

CiscoCertified Network Professional Security

Domain 6Objective 1

6.1 Describe Identity Management and Secure Network Access Concepts Such as Guest Services, Profiling, Posture Assessment, and BYOD 350-701 Practice Questions (Page 2)

Part of the Network Access, Visibility, and Enforcement domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

5concepts

15%of the exam

Questions 6–10

6application · medium
A company is planning a BYOD initiative. They want to allow personal devices to access corporate resources, but they also want to separate personal and corporate data on the device. Which approach is most appropriate?
Select an answer first
7application · medium
A company wants to automatically detect when an employee connects a personal IoT device (e.g., a smart speaker) to the corporate network. They want to block such devices from accessing the network. Which feature should they use?
Select an answer first
8expert · hard
A company wants to automatically detect when an employee connects a personal router to the corporate network, which is against policy. They want to block the router and notify the security team. Which feature should they use?
Select an answer first
9foundation · easy
What is the primary purpose of posture assessment in network access?
Select an answer first
10expert · hard
A company wants to automatically detect and classify all devices on the network, including IoT devices like cameras and sensors. They want to apply different security policies based on the device type. However, they also want to ensure that unknown devices are denied access by default. Which approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.