Which of the following is an example of a device characteristic used by profiling to classify a device?

Operating system and open ports

A company wants to provide guest access to visitors, but they also want to ensure that guests cannot access internal resources. They also want to automatically identify the type of guest device to apply appropriate bandwidth limits. Which combination of features should they use?

Guest services with posture assessment

Posture assessment with a captive portal

A hospital provides a guest wireless network for visitors. The network team wants to automatically identify the type of device (e.g., smartphone, tablet, laptop) connecting, and then apply appropriate bandwidth policies. They also need to ensure that guests must accept an acceptable-use policy before gaining internet access. Which two features should be combined to meet these requirements?

Guest sponsorship and profiling

BYOD onboarding and posture assessment

What is the primary purpose of identity management in a secure network access solution?

To encrypt all traffic between endpoints and the network infrastructure

To block all external threats before they reach the network perimeter

To provide a single sign-on experience for all cloud applications

To ensure that each user or device is uniquely identified and their access rights are enforced consistently across the network

A company wants to implement a NAC solution that supports both employee and guest access. They want to use the same NAC infrastructure for both, but with different policies. They also want to enforce posture checks on employee devices but not on guest devices. Which approach should they use?

Use guest services for employees

Use role-based policies with posture assessment for employees only

Use posture assessment for both employees and guests

Use separate NAC infrastructures for employees and guests

CiscoCertified Network Professional Security

Domain 6Objective 1

6.1 Describe Identity Management and Secure Network Access Concepts Such as Guest Services, Profiling, Posture Assessment, and BYOD 350-701 Practice Questions (Page 4)

Part of the Network Access, Visibility, and Enforcement domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

5concepts

15%of the exam

Questions 16–20

16foundation · easy
Which of the following is an example of a device characteristic used by profiling to classify a device?
Select an answer first
17expert · hard
A company wants to provide guest access to visitors, but they also want to ensure that guests cannot access internal resources. They also want to automatically identify the type of guest device to apply appropriate bandwidth limits. Which combination of features should they use?
Select an answer first
18application · medium
A hospital provides a guest wireless network for visitors. The network team wants to automatically identify the type of device (e.g., smartphone, tablet, laptop) connecting, and then apply appropriate bandwidth policies. They also need to ensure that guests must accept an acceptable-use policy before gaining internet access. Which two features should be combined to meet these requirements?
Select an answer first
19foundation · easy
What is the primary purpose of identity management in a secure network access solution?
Select an answer first
20expert · hard
A company wants to implement a NAC solution that supports both employee and guest access. They want to use the same NAC infrastructure for both, but with different policies. They also want to enforce posture checks on employee devices but not on guest devices. Which approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.