350-701 Endpoint Protection and Detection Practice Question
A security team is designing an endpoint protection strategy for a mix of Windows and macOS endpoints. They want to use Cisco AMP for Endpoints with centralized management. Which deployment approach minimizes administrative overhead?
⚠ Common exam trap
A common mix-up: candidates assume different operating systems require separate management consoles or policies, but Cisco AMP for Endpoints' cloud console supports a single policy with OS-specific exclusions, which is the most efficient approach for minimizing administrative overhead.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the AMP cloud console to manage a single policy that applies to both platforms with os-specific exclusions.
Cisco AMP for Endpoints offers a cloud-based console that provides centralized management for both Windows and macOS endpoints from a single pane of glass. This eliminates the need for on-premises infrastructure or separate management tools, and a single policy can be applied across platforms with OS-specific exclusions to handle differences in file paths and processes, thereby minimizing administrative overhead.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy an on-premises AMP Console for each operating system.
Why it's wrong here
AMP offers a unified cloud console; separate on-premises consoles increase complexity.
- ✗
Install a Windows Server as a management point and deploy connectors via SCCM.
Why it's wrong here
Installing a Windows Server as a management point introduces a dependency on on-premises infrastructure and SCCM, which contradicts the goal of minimising administrative overhead for a mixed Windows and macOS environment. SCCM does not natively manage macOS endpoints, requiring additional third-party tooling or manual processes. This approach is tempting because SCCM provides robust patch management and software deployment for Windows-only fleets, where it would be the correct choice for centralised control.
- ✗
Use group policies to define different policies for Windows and macOS.
Why it's wrong here
Group policies are Windows-only; AMP uses its own policy management.
- ✓
Use the AMP cloud console to manage a single policy that applies to both platforms with os-specific exclusions.
Why this is correct
The cloud console supports multi-platform policy with per-OS rules, minimizing overhead.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.