350-701 Endpoint Protection and Detection Practice Question
A financial company uses Cisco AMP for Endpoints to protect 500 Windows workstations. The security administrator notices that several endpoints in the accounting department are showing 'Out-of-Date' status for over a week. The administrator checks the AMP console and sees that the group policy for accounting has been modified to disable certain scanning features. The endpoints have Internet connectivity but are not updating their policy or receiving new definitions. The administrator suspects a misconfiguration. What should the administrator do first to resolve this issue?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that the endpoints can communicate with the AMP cloud by checking the connector's connectivity status.
The most common cause of 'Out-of-Date' endpoints is a communication issue. Checking the AMP connector's connection status (e.g., via the connector GUI) can reveal if the endpoint can reach the cloud. Option A (restarting services) might temporarily fix but does not identify the root cause. Option C (increasing polling interval) does not help if there is a connectivity obstacle. Option D (reinstalling the connector) is drastic and should be a last resort.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Restart the AMP services on a few affected endpoints to force a policy update.
Why it's wrong here
Temporary fix; does not address root cause.
- ✓
Verify that the endpoints can communicate with the AMP cloud by checking the connector's connectivity status.
Why this is correct
This identifies if the issue is network-related.
- ✗
Increase the policy polling interval from 60 minutes to 30 minutes.
Why it's wrong here
More frequent polls do not help if connectivity fails.
- ✗
Reinstall the AMP connector on all affected endpoints.
Why it's wrong here
Unnecessary; the issue is likely not the connector software.
Visual reference
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.