Question 907 of 978
Root Cause of AMP Connector Inability to Connect to Cloud: Proxy Authentication Failure
Exhibit
Refer to the exhibit. ``` 2024-01-15 11:00:00 ERROR: Failed to connect to AMP cloud: Connection timed out 2024-01-15 11:01:00 WARNING: Retrying connection in 60 seconds 2024-01-15 11:02:00 INFO: Proxy configured: proxy.company.com:3128 2024-01-15 11:03:00 ERROR: Proxy authentication failed: 407 Proxy Authentication Required ```
Based on the exhibit, what is the root cause of the AMP connector's inability to connect to the cloud?
Quick Answer
The root cause of the AMP connector’s inability to connect to the cloud is a proxy authentication failure, meaning the proxy requires credentials but the connector has none configured. This is confirmed by the HTTP 407 status code in the logs, which explicitly signals that the proxy server is rejecting the request due to missing or incorrect authentication. On the Cisco SCOR 350-701 exam, this scenario tests your ability to interpret proxy-related error codes within secure endpoint communications, a common pitfall where candidates mistake a 407 for a network connectivity issue or a proxy misconfiguration. Remember that a 407 is distinct from a 502 or timeout—it specifically points to credential gaps, not the proxy’s presence or network reachability. A useful memory tip: “407 means you must be heard (authenticated) before you can be served.”
⚠ Common exam trap
Cisco often tests the distinction between proxy reachability and proxy authentication—candidates see the connector can reach the proxy and incorrectly assume the proxy address is correct, overlooking the missing credentials that cause the 407 error.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The proxy requires authentication, and the AMP connector has no credentials configured.
The AMP connector is configured to use a proxy server, but the proxy requires authentication. Without credentials configured in the connector, the proxy will reject the HTTP CONNECT request (RFC 7231), preventing the connector from establishing the TLS tunnel to the AMP cloud. This is a common scenario when an organization uses an authenticated forward proxy, and the connector's proxy settings lack the username/password fields.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The AMP cloud servers are blocking the connector's IP address.
Why it's wrong here
There is no evidence of cloud blocking; the error is at the proxy level.
- ✗
The proxy server address is incorrect in the connector configuration.
Why it's wrong here
The log shows the proxy is configured and the connector is attempting to use it (407 error).
- ✓
The proxy requires authentication, and the AMP connector has no credentials configured.
Why this is correct
The 407 error explicitly indicates proxy authentication failure.
- ✗
The connector has no network connectivity to the internet.
Why it's wrong here
The initial timeout could be due to proxy, but later logs show the proxy is reachable.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on 350-701
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A small business uses Cisco AMP for Endpoints with a cloud-based console. The owner receives an email from Cisco that the AMP connector on a specific endpoint has gone offline. The endpoint is a Windows 10 laptop used for remote work. The owner checks the AMP console and sees the endpoint's last check-in was three days ago. The owner contacts the remote user, who says the laptop is running normally and they can access the internet. What should the owner do to resolve the issue?
easy- A.Instruct the user to disable Windows Firewall temporarily.
- B.Ask the user to install the latest Windows updates.
- C.Ask the user to uninstall and reinstall the AMP connector.
- ✓ D.Instruct the user to restart the AMP connector service (Cisco AMP for Endpoints Connector).
Why D: The AMP connector on the endpoint may have a stopped or crashed service. Restarting the Cisco AMP for Endpoints Connector service will re-establish communication with the cloud console. Option A (disable firewall) is unnecessary and could reduce security; internet access works so firewall is likely not blocking. Option B (install Windows updates) is unrelated to the connector's offline status. Option C (reinstall connector) is an extreme measure that should only be attempted after simpler steps like restarting the service fail.
Variation 2. Based on the exhibit, what does the 'Isolated: Yes' status indicate?
easy- A.The connector is disconnected from the cloud and requires a reboot.
- ✓ B.The connector is in a quarantine mode due to a loss of cloud connectivity.
- C.The connector is permanently blocked by a firewall and needs manual reconfiguration.
- D.The network component is disabled, preventing network traffic monitoring.
Why B: In Cisco AMP (Advanced Malware Protection) for Endpoints, the 'Isolated: Yes' status indicates that the connector has entered quarantine mode because it has lost connectivity to the AMP cloud. This is a security feature that prevents the endpoint from communicating with other hosts on the network while still allowing outbound traffic to the cloud for reconnection attempts. The connector remains functional but isolated to contain potential threats until cloud connectivity is restored.
Last reviewed: Jul 4, 2026
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.