mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: Deploying a new remote access solution for…
A company is deploying a new remote access solution for teleworkers. They need to ensure that only company-owned devices can connect, and that the devices meet security posture requirements. Which combination of technologies should be used?
⚠ Common exam trap
Cisco often tests the distinction between user authentication and device posture assessment, where candidates mistakenly assume any VPN technology (like IPsec or SSL VPN) inherently provides device compliance checking, but only a client-based solution with posture assessment (e.g., AnyConnect + ISE) can enforce both device identity and security posture.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco AnyConnect VPN with posture assessment
Cisco AnyConnect VPN with posture assessment is correct because it provides both device authentication (ensuring only company-owned devices connect) and security posture checks (e.g., OS patch level, antivirus status, firewall enabled) via the Cisco Secure Client (formerly AnyConnect) and ISE (Identity Services Engine). This combination enforces compliance before granting network access, meeting the requirement for teleworker remote access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Cisco AnyConnect VPN with posture assessment
Why this is correct
AnyConnect integrates with ISE for posture checks to enforce compliance.
- ✗
IPsec VPN with pre-shared keys
Why it's wrong here
Pre-shared keys do not verify device identity or posture.
- ✗
DMVPN
Why it's wrong here
DMVPN is for site-to-site VPNs, not remote access with posture checks.
- ✗
SSL VPN without client
Why it's wrong here
Clientless SSL VPN cannot perform endpoint posture assessment.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.