350-701 Practice Question: Secure Network Access, Visibility and Enforcement
Which TWO factors should be considered when designing a Cisco ISE deployment for network access control (NAC) in a multi-site environment? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ISE node roles and placement (primary, secondary, monitoring)
Multi-site NAC design with Cisco ISE requires careful consideration of node roles and WAN connectivity. Option A is correct because ISE node roles (Administration, Policy Service, Monitoring) and placement across sites determine authentication flow, failover, and load balancing. Option E is correct because WAN link latency and reliability between sites directly impact authentication timeouts and replication. Option B (Endpoint profiling) is a general ISE feature but not specific to multi-site design. Option C (Number of endpoints per policy evaluator) is a capacity planning detail, not a primary design factor for multi-site. Option D (Type of network access device) is more about compatibility than multi-site topology.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
ISE node roles and placement (primary, secondary, monitoring)
Why this is correct
Roles define failover and administration; critical for multi-site.
- ✗
Endpoint profiling needs
Why it's wrong here
Profiling is operational, not a design factor for multi-site.
- ✗
Number of endpoints per policy evaluator
Why it's wrong here
This is a scalability factor but not specific to multi-site design.
- ✗
Type of network access device (switch, WLC, VPN)
Why it's wrong here
This is relevant but not a multi-site-specific factor.
- ✓
WAN link latency and reliability between sites
Why this is correct
High latency can cause authentication timeouts; redundant links are needed.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.