Free study guide

Cisco CCNP 350-701 SCOR Study Guide

Cisco Certified Network Professional Security Core 350-701

The Cisco 350-701 SCOR (Implementing and Operating Cisco Security Core Technologies) is the core exam for CCNP Security. It covers security concepts, network security, cloud security, secure service edge, endpoint protection and detection, and network access, visibility and enforcement.

  • Exam code 350-701
  • Professional level
  • 6 exam domains

This guide is free, with no sign-up. It explains every Cisco CCNP 350-701 SCOR exam topic in plain English, one chapter at a time. Read them in order or jump straight to the topic you need.

  • 6chapters
  • 37topics
  • 16diagrams and exhibits
  • 2 h 56 minfast track
Start with Security Concepts
  • Every topic follows the same simple pattern: what it is, how it works, common mistakes
  • Diagrams and real command output where a picture explains it best
  • Exam tips and worked subnetting and IPv6 practice, with answers

How the exam is weighted

Each domain is worth this share of the exam, so spend your study time in proportion. Select a domain to open its chapter.

Chapters

Open a chapter to see its topics and how long each takes.

1Security Concepts7 topics · 31 min fast trackThreats, vulnerabilities, AI risks, cryptography, VPNs, zero trust, SAFE and reading security API scripts.
  1. 1Attack Threats Across On-Premises, Hybrid and Cloud5 min
  2. 2Vulnerabilities, Exploits, CVE and CVSS4 min
  3. 3AI and LLM Vulnerabilities, and Phishing Controls4 min
  4. 4Cryptography Components for Network Security5 min
  5. 5Site-to-Site and Remote Access VPN Deployment Types5 min
  6. 6Security Intelligence, Zero Trust and Defense in Depth4 min
  7. 7Interpreting Python Scripts That Call Security APIs4 min
Read the chapter overview →
2Network Security8 topics · 40 min fast trackFirewall and IPS models, telemetry, Layer 2 hardening, AAA, secure management and FTD policy and VPN.
  1. 1IPS, Firewall Deployment Models and Telemetry5 min
  2. 2Segmentation, Port Security and Layer 2 Hardening5 min
  3. 3DHCP Snooping, Dynamic ARP Inspection and Storm Control5 min
  4. 4Management Options and CIS Benchmark Hardening5 min
  5. 5Troubleshooting AAA with TACACS+ and RADIUS5 min
  6. 6Secure Network Management with SNMPv3, NETCONF, RESTCONF, Syslog and NTP5 min
  7. 7Access Control, AVC, URL Filtering and Threat Inspection on FTD5 min
  8. 8Site-to-Site and Remote Access VPN on FTD, and Troubleshooting5 min
Read the chapter overview →
3Cloud Security6 topics · 26 min fast trackShared responsibility, cloud models and CASB, Multicloud Defense, Splunk, eBPF workload security, DevSecOps.
  1. 1Shared Responsibility, Security Frameworks and Policy Management4 min
  2. 2Cloud Models, NIST 800-145 and Cloud Access Security Broker4 min
  3. 3Cloud Network, Application and Data Security with Multicloud Defense and Secure Workload5 min
  4. 4Ingesting Cloud Logging and Monitoring Data into Splunk5 min
  5. 5Application and Workload Security Concepts Including eBPF4 min
  6. 6DevSecOps, Infrastructure as Code and Container Security4 min
Read the chapter overview →
4Secure Service Edge5 topics · 25 min fast trackSSE and SASE, Cisco Secure Access internet and private access, DLP, AI guardrails and Investigate.
  1. 1Security Service Edge and Secure Access Service Edge5 min
  2. 2Configuring Cisco Secure Access Secure Internet Access5 min
  3. 3Configuring Cisco Secure Access Secure Private Access5 min
  4. 4Data Loss Prevention and AI Guardrails for Secure Internet Access5 min
  5. 5Interpreting Cisco Secure Access Investigate Scores and Indicators5 min
Read the chapter overview →
5Endpoint Protection and Detection5 topics · 23 min fast trackEPP, EDR, device management, posture, Secure Client, Secure Endpoint and email defense.
  1. 1Endpoint Protection Platforms and Endpoint Detection and Response4 min
  2. 2Endpoint Management, Asset Inventory and Posture Assessment4 min
  3. 3Cisco Secure Client and Cisco Secure Malware Analytics5 min
  4. 4Configuring Cisco Secure Endpoint and Interpreting Detection Events5 min
  5. 5Email Security with Cisco Secure Email Threat Defense5 min
Read the chapter overview →
6Network Access, Visibility, and Enforcement6 topics · 31 min fast trackISE access control, 802.1X, CoA, exfiltration, XDR, SIEM, SOAR, Duo and Splunk.
  1. 1Identity and Secure Access Concepts, Device Compliance and Application Control5 min
  2. 2Configuring 802.1X and MAB with Cisco ISE6 min
  3. 3Network Access with Change of Authorization5 min
  4. 4Data Exfiltration Techniques and How to Detect Them5 min
  5. 5XDR, SIEM and SOAR with Cisco XDR and Splunk5 min
  6. 6Cisco Duo in a Zero Trust Architecture5 min
Read the chapter overview →

Ready for more practice?

The full Cisco CCNP 350-701 SCOR question bank has 822 questions, with timed practice exams and an explanation for every answer.

SubscribeTry Sample Exam

This study guide is independent and is not affiliated with, endorsed by, or sponsored by Cisco. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.