Practice ExamCiscoCCNP-SECURITY-350-701Professional
Cisco CCNP Security (SCOR 350-701)
Unlimited CCNP Security (SCOR 350-701) practice exam retakes, each drawn fresh from a question pool weighted by the official exam domains — security concepts, network security, securing the cloud, content security, endpoint protection & detection, and secure network access/visibility/enforcement.
Question pool
195
Per attempt
65 Q
Duration
120 min
Pass score
80%
Exam mode Default
120-minute timer, flag for review and a review screen before you submit — just like test day.
Practice mode
See the correct answer, the exam domain and a full explanation after every question.
What you get
- A 195-question pool — every attempt draws 65 fresh questions weighted by the official exam domains
- Unlimited retakes, lifetime access
- Score report by exam domain, with your score trend over time
- Answer review with explanations and reference links
- Original, blueprint-aligned questions — never exam dumps
Best value
Ready to sit the real CCNP-SECURITY-350-701 exam?
Get the official exam voucher and this practice exam is included free (worth US$20.00).
Voucher + practice
US$400.00
GST inclusive
Exam domains
Every attempt draws questions in these official proportions. Open a domain to see the subtopics it covers.
Security Concepts20%
Security Concepts20%
- Attack threats against on-premises, hybrid and cloud environments
- Security vulnerabilities and exploits, incl. OWASP Top 10 and CVE/CVSS prioritization
- Vulnerabilities in AI/LLM models such as prompt injection and system prompt leakage
- Controls that protect against phishing and social engineering attacks
- Cryptography components and site-to-site/remote access VPN deployment types
- Security intelligence authoring, sharing and consumption
- Zero trust architecture and defense-in-depth strategy (SAFE)
- Interpret scripts that call security appliance APIs in a language such as Python
Network Security25%
Network Security25%
- Network security solutions and deployment models for intrusion prevention and firewalls
- Security monitoring and telemetry technologies
- Configure infrastructure security: segmentation, port security, DHCP snooping, DAI
- Management options for security solutions and CIS benchmarks for device hardening
- Troubleshoot AAA for device and network access such as TACACS+ and RADIUS
- Configure secure network management: SNMPv3, NETCONF/RESTCONF, secure syslog, NTP auth
- Implement access control, AVC, URL filtering, malware and intrusion prevention on FTD
- Configure and troubleshoot site-to-site and remote access VPN on Secure Firewall (FTD)
Securing the Cloud15%
Securing the Cloud15%
- Security responsibility within cloud shared responsibility models
- Select cloud security capabilities, deployment models, frameworks and policy management
- Select security solutions for public, private, hybrid and community clouds, incl. CASB
- Network, application and data security in the cloud (Multicloud Defense, Secure Workload)
- Configure Splunk to ingest cloud logging and monitoring data
- Application and workload security concepts, including eBPF
- DevSecOps: IaC security, CI/CD pipelines, container orchestration, secure development
Content Security10%
Content Security10%
- Security Service Edge (SSE) and Secure Access Service Edge (SASE)
- Configure Cisco Secure Access Secure Internet Access
- Configure Cisco Secure Access Secure Private Access
- Configure data loss prevention and AI guardrails for secure internet access
- Interpret Cisco Secure Access Investigate scores and indicators
- Configure email security features with Cisco Secure Email Threat Defense
Endpoint Protection and Detection15%
Endpoint Protection and Detection15%
- Endpoint Protection Platforms (EPP) and Endpoint Detection and Response (EDR)
- Endpoint device management and asset inventory systems such as MDM
- Endpoint posture assessment solutions
- Endpoint protection with Cisco Secure Client and Secure Malware Analytics
- Configure endpoint antimalware protection using Cisco Secure Endpoint
- Interpret Cisco Secure Endpoint malware detection events
Secure Network Access, Visibility, and Enforcement15%
Secure Network Access, Visibility, and Enforcement15%
- Identity management and secure access: guest services, profiling, posture and BYOD
- Device compliance and application control
- Configure 802.1X and MAB network access control with Cisco ISE
- Configure network access with Change of Authorization (CoA)
- Exfiltration techniques such as DNS tunneling, HTTPS, email, ICMP and cloud storage
- Visibility and enforcement with telemetry, AI/ML, XDR and SIEM/SOAR (Splunk, Cisco XDR)
- Cisco Duo in zero trust: Trust Monitor, MFA, Device Trust and Adaptive Access
- Manage, orchestrate and automate security information and events with Splunk
References
- Official exam page:cisco.com
- Official study guide:learningcontent.cisco.com (PDF)
Student reviews
No reviews yet — be the first to share your experience.
Tertiary Exams provides original practice questions for learning. We are not affiliated with Cisco, and we do not provide real exam dumps.
CCNP-SECURITY-350-701 Practice Exam
US$20.00 GST inclusive