350-701 Endpoint Protection and Detection Practice Question
Which TWO are required to successfully deploy Cisco AMP for Endpoints in a Windows domain environment with Group Policy?
⚠ Common exam trap
Cisco often tests the misconception that Group Policy can both install software and assign policies, but in reality, Group Policy only assigns the AMP policy via registry settings, while the connector installation must be handled separately through startup scripts, SCCM, or manual methods.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Install the AMP connector on each endpoint
The AMP for Endpoints connector is the agent software that must be installed on each endpoint to provide malware detection, file trajectory, and retrospective security analysis. Without the connector, the endpoint cannot communicate with the AMP cloud or enforce any security policies, making deployment non-functional.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Install the AMP connector on each endpoint
Why this is correct
The connector must be present to enforce policies.
- ✗
Configure the firewall to block outbound HTTPS traffic
Why it's wrong here
HTTPS must be allowed for cloud communication.
- ✗
Install the AMP connector on a domain controller
Why it's wrong here
Not required; domain controllers can be endpoints but not necessary for deployment.
- ✓
Assign an AMP policy to the connector via Group Policy
Why this is correct
Policy distribution is typically done via Group Policy.
- ✗
Ensure all endpoints are joined to the domain
Why it's wrong here
Group Policy can be applied locally to non-domain machines.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.