Courseiva
Endpoint Protection and DetectioneasyMultiple ChoiceObjective-mapped

350-701 Endpoint Protection and Detection Practice Question

A small business uses Cisco AMP for Endpoints with a cloud-based console. The owner receives an email from Cisco that the AMP connector on a specific endpoint has gone offline. The endpoint is a Windows 10 laptop used for remote work. The owner checks the AMP console and sees the endpoint's last check-in was three days ago. The owner contacts the remote user, who says the laptop is running normally and they can access the internet. What should the owner do to resolve the issue?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Instruct the user to restart the AMP connector service (Cisco AMP for Endpoints Connector).

The AMP connector on the endpoint may have a stopped or crashed service. Restarting the Cisco AMP for Endpoints Connector service will re-establish communication with the cloud console. Option A (disable firewall) is unnecessary and could reduce security; internet access works so firewall is likely not blocking. Option B (install Windows updates) is unrelated to the connector's offline status. Option C (reinstall connector) is an extreme measure that should only be attempted after simpler steps like restarting the service fail.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Instruct the user to disable Windows Firewall temporarily.

    Why it's wrong here

    Firewall allowing internet but maybe blocking AMP? Unlikely.

  • Ask the user to install the latest Windows updates.

    Why it's wrong here

    Not likely to fix a connector service issue.

  • Ask the user to uninstall and reinstall the AMP connector.

    Why it's wrong here

    Too aggressive; try service restart first.

  • Instruct the user to restart the AMP connector service (Cisco AMP for Endpoints Connector).

    Why this is correct

    Restarting the service often resolves check-in issues.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.