mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: Dynamically change the VLAN assignment for a user…
An administrator wants to dynamically change the VLAN assignment for a user after a posture assessment determines that the endpoint is missing a critical patch. Which ISE feature accomplishes this?
⚠ Common exam trap
Cisco often tests the distinction between authentication methods (like MAB) and post-authentication enforcement mechanisms (like CoA), so the trap here is confusing a feature that handles initial access (MAB) with one that modifies an existing session (CoA).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
CoA
Change of Authorization (CoA) is the correct answer because it is the ISE feature that allows dynamic, real-time changes to an authenticated session, such as reassigning a VLAN, after a posture assessment. When a posture assessment determines an endpoint is non-compliant (e.g., missing a critical patch), ISE can send a CoA request (RFC 5176) to the network access device (NAD) to modify the session attributes, including VLAN assignment, without requiring the user to reauthenticate.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
TrustSec
Why it's wrong here
TrustSec assigns SGTs but does not dynamically change VLANs after posture.
- ✗
Profiling
Why it's wrong here
Profiling identifies device type but does not change VLANs.
- ✗
MAB
Why it's wrong here
MAB is an authentication method, not a dynamic change mechanism.
- ✓
CoA
Why this is correct
CoA enables dynamic session changes, including VLAN/ACL updates.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.