350-701 Endpoint Protection and Detection Practice Question
An organization wants to deploy AMP for Endpoints in an offline environment where endpoints cannot connect to the internet. Which deployment option is appropriate?
⚠ Common exam trap
Test-takers frequently assume a local proxy or standalone mode can replace cloud connectivity, but Cisco specifically tests that AMP for Endpoints requires a Private Cloud appliance for offline environments, as the connectors have no offline or standalone capability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Install a Cisco AMP Private Cloud appliance within the local network and point connectors to it.
Cisco AMP for Endpoints offers a Private Cloud appliance that can be deployed on-premises in an offline environment. This appliance replicates all cloud-based threat intelligence and analysis locally, allowing endpoints to communicate with it via the AMP connector without requiring internet access. The Private Cloud appliance handles all file disposition, retrospective alerts, and policy updates within the local network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy the AMP connectors with a local proxy caching all AMP communications.
Why it's wrong here
A proxy still requires internet access to the AMP cloud.
- ✓
Install a Cisco AMP Private Cloud appliance within the local network and point connectors to it.
Why this is correct
Private Cloud provides all cloud functionality locally for offline environments.
- ✗
Configure the AMP connectors in 'Standalone' mode to operate without cloud communication.
Why it's wrong here
AMP connectors require cloud or private cloud communication; there is no standalone mode.
- ✗
Use Cisco ESA as an intermediary to proxy AMP requests from endpoints.
Why it's wrong here
Cisco ESA is an email security appliance, not designed for endpoint connectivity.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.