350-701 Practice Question: Secure Network Access, Visibility and Enforcement
An engineer is troubleshooting a Cisco ISE deployment where some endpoints are not being profiled correctly. The administrator notices that the endpoints are not sending DHCP requests. Which profiling probe should be primarily used to identify these endpoints?
⚠ Common exam trap
Cisco often tests the misconception that DHCP is the only way to profile endpoints, leading candidates to choose the DHCP probe, but the trap here is recognizing that NetFlow provides visibility even when DHCP traffic is absent.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NetFlow probe
(NetFlow probe) because when endpoints do not send DHCP requests, the DHCP probe cannot collect any data. The NetFlow probe analyzes network traffic flows to identify endpoints based on IP addresses, ports, and protocols, even without DHCP activity. This allows Cisco ISE to profile endpoints by observing their communication patterns, such as HTTP or DNS traffic, which still occur even if DHCP is not used.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
NetFlow probe
Why this is correct
NetFlow probe analyzes traffic flows and can profile endpoints based on IP and port information.
- ✗
DHCP probe
Why it's wrong here
DHCP probe relies on DHCP traffic, which is not present.
- ✗
HTTP probe
Why it's wrong here
HTTP probe requires HTTP traffic, which may not be present.
- ✗
DNS probe
Why it's wrong here
DNS probe can identify hostnames but not if DNS queries are not sent.
Visual reference
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.