Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Free Resources

Difficulty IndexLearn — Free ChaptersIT GlossaryFree Tools & LabsStudy GuidesCareer RoadmapsBrowse by VendorCisco Command ReferenceCCNA Scenarios

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

HomeCertifications350-701TopicsEndpoint Security and Identity
Free · No Signup RequiredCisco · 350-701

350-701 Endpoint Security and Identity Practice Questions

20+ practice questions focused on Endpoint Security and Identity — one of the most tested topics on the Cisco SCOR / CCNP Security Core 350-701 exam. Each question includes a detailed explanation so you learn why the right answer is correct.

Start Endpoint Security and Identity Practice

Exam Domains

Security ConceptsNetwork SecurityEndpoint Security and IdentityCloud SecurityContent SecurityEndpoint Protection and DetectionSecure Network Access, Visibility and EnforcementAll domains →

Study Tools

Practice TestMock ExamFlashcardsAll Topics

Sample Endpoint Security and Identity Questions

Practice all 20+ →
1.

A network administrator wants to deploy Cisco AMP for Endpoints to protect endpoints. Which feature allows the detection of a file that was initially deemed benign but later discovered to be malicious?

A.File Reputation
B.IOC Scanning
C.Exploit Prevention
D.Retrospective Security

Explanation: Retrospective security in Cisco AMP for Endpoints continuously monitors file behavior and can re-evaluate files that were previously allowed, updating their disposition if malicious activity is detected later.

2.

An engineer is configuring Cisco ISE for 802.1X authentication. The organization has a mix of devices, including some that do not support 802.1X supplicants. Which method should the engineer use to allow these non-supplicant devices to authenticate?

A.Enable MAC Authentication Bypass on the authenticator
B.Deploy Cisco AMP connectors on all endpoints
C.Configure a guest portal for self-registration
D.Use EAP-TLS with device certificates

Explanation: MAC Authentication Bypass (MAB) allows devices that cannot run an 802.1X supplicant to authenticate based on their MAC address, which is sent as the username and password.

3.

During a security incident, a SOC analyst notices that a malicious file was executed on an endpoint. Using Cisco AMP for Endpoints, which feature should the analyst use to visualize the file's propagation and activities across the network over time?

A.Orbital Advanced Search
B.IOC Scan
C.Device Trajectory
D.File Reputation Lookup

Explanation: Device Trajectory provides a timeline view of file and process activities on an endpoint, showing how a file propagated and what actions it performed, which is crucial for incident investigation.

4.

In Cisco ISE, profiling is used to identify device types. Which probe must be enabled for ISE to determine the operating system of a device by analyzing DHCP options?

A.Device Sensor
B.DHCP Probe
C.HTTP Probe
D.SNMP Probe

Explanation: DHCP Probe analyzes DHCP packet options (e.g., option 55) to identify the device's OS or vendor class, enabling ISE to profile the device type.

5.

An organization wants to enforce endpoint posture compliance before granting network access. In Cisco ISE, which component performs the actual checks on the endpoint to verify antivirus status and patch levels?

A.Network Access Device (switch/WLC)
B.Posture Agent
C.ISE Policy Service Node
D.Profiling Probe

Explanation: The posture agent (Cisco AnyConnect Posture Module or ISE Posture Agent) runs on the endpoint and performs checks for required software, updates, and configurations, then reports back to ISE.

+15 more Endpoint Security and Identity questions available

Practice all Endpoint Security and Identity questions

How to master Endpoint Security and Identity for 350-701

1. Baseline your knowledge

Start with 10 questions to gauge your current understanding of Endpoint Security and Identity. This tells you whether you need a concept refresher or just practice.

2. Review every explanation

For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.

3. Focus on exam traps

Endpoint Security and Identity questions on the 350-701 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.

4. Reach 80% consistently

Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.

Frequently asked questions

How many 350-701 Endpoint Security and Identity questions are on the real exam?

The exact number varies per candidate. Endpoint Security and Identity is tested as part of the Cisco SCOR / CCNP Security Core 350-701 blueprint. Practicing with targeted Endpoint Security and Identity questions ensures you can handle any format or difficulty that appears.

Are these 350-701 Endpoint Security and Identity practice questions free?

Yes. Courseiva provides free 350-701 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.

Is Endpoint Security and Identity one of the harder 350-701 topics?

Difficulty is subjective, but Endpoint Security and Identity is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.

Ready to practice?

Launch a full Endpoint Security and Identity practice session with instant scoring and detailed explanations.

Start Endpoint Security and Identity Practice →

Topic Info

Topic

Endpoint Security and Identity

Exam

350-701

Questions available

20+