Courseiva
← 350-701
Full test
mediumMultiple ChoiceObjective-mapped

350-701 Practice Question: In a Cisco ISE deployment, a network…

In a Cisco ISE deployment, a network administrator needs to dynamically change the VLAN assignment for an endpoint after a posture assessment determines that the endpoint is non-compliant. Which ISE feature enables this dynamic change without re-authentication?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Change of Authorization (CoA)

Change of Authorization (CoA) allows ISE to send updates to the network device to change VLAN, ACL, or other attributes without requiring the endpoint to re-authenticate.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    MAB

    Why it's wrong here

    MAB is an authentication method, not a mechanism for dynamic policy changes.

  • ✗

    Profiling

    Why it's wrong here

    Profiling identifies device type, but does not dynamically change access policies.

  • ✗

    TrustSec

    Why it's wrong here

    TrustSec uses SGTs for access control, but CoA is the mechanism for dynamic VLAN changes.

  • ✓

    Change of Authorization (CoA)

    Why this is correct

    Correct. CoA enables real-time policy changes after posture assessment.

Visual reference

Switch VLAN 10 Sales (192.168.10.0/24) PC-A PC-B VLAN 20 HR (192.168.20.0/24) PC-C PC-D Router VLANs isolate traffic — inter-VLAN routing requires a Layer 3 device

About these practice questions

Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.