This course prepares you for the Cisco 350-701 SCOR core exam (Implementing and Operating Cisco Security Core Technologies). It covers security architecture, secure access, VPN solutions, content security, endpoint protection, threat detection and automation in Cisco environments.
Exam voucher : Exam voucher: included or optional depending on the package — contact us.
Objectives
Describe and implement defense-in-depth network security architectures based on least privilege
Secure administrative and user access with AAA, Cisco ISE, 802.1X and network access controls
Configure Cisco firewall security features including policies, NAT, high availability and troubleshooting
Implement site-to-site and remote-access VPNs with IPsec, SSL, AnyConnect and Cisco Secure Client technologies
Protect email, web content and DNS against threats with appropriate Cisco solutions
Deploy endpoint protection, network visibility and threat detection and response mechanisms
Use automation tools, APIs and data models to operate Cisco Security solutions
Program
Security architecture (15%)
Defense-in-depth principles and zero-trust models
Risk assessment, attack surfaces and asset classification
Network segmentation, microsegmentation and plane separation
Cisco Secure architecture and security-solution integration
High availability, resilience and continuity of security services
Designing consistent policies and managing their lifecycle
Secure access (20%)
AAA, RADIUS, TACACS+ and administrative access control
Multifactor authentication and identity federation
Cisco ISE, profiling, policies and endpoint posture
802.1X, MAB and wired and wireless network access control
ACLs, TrustSec, identity-based segmentation and SGTs
Securing SSH, APIs and management interfaces
Infrastructure security (20%)
Cisco firewalls: zones, policies, objects and application inspection
NAT, PAT, flow control and event logging
Firewall high availability and state synchronization
Protecting routers and switches from Layer 2 and Layer 3 attacks
Control Plane Policing, uRPF and infrastructure-service protection
Detecting, verifying and troubleshooting network-security incidents
Secure connectivity (20%)
Symmetric and asymmetric cryptography and key-exchange principles
PKI, certificates, certificate authorities and revocation
Site-to-site IPsec VPNs, IKEv1, IKEv2 and encryption profiles
Remote-access VPNs with SSL, AnyConnect and Cisco Secure Client
DMVPN, FlexVPN and protection of inter-site communications
Troubleshooting tunnels, IKE negotiations and routing problems
Content and endpoint security (15%)
Email security, anti-spam and malware detection
Web security, URL filtering and encrypted-traffic inspection
DNS security and protection against phishing and malicious domains
Endpoint protection, application control and behavioral analysis
Threat intelligence, indicators of compromise and reputation
Data-loss prevention and content-control policies
Monitoring, detection and automation (10%)
Collecting and correlating security logs and events
Threat detection, alert analysis and incident response
Cisco Secure Network Analytics and network-flow visibility
Cisco SecureX, tool integration and response orchestration
REST APIs, JSON, Python and security data models
Configuration and compliance automation
Prerequisites
Cisco does not impose formal prerequisites for taking the 350-701 exam
Strong experience with networking, Cisco IOS and security principles is strongly recommended
Knowledge close to CCNA level and practical experience with firewalls, VPNs and access controls are recommended
Cisco command-line practice and structured troubleshooting experience are essential to get the most from the hands-on labs
Some knowledge of cryptography, PKI, Python and REST APIs is useful but not mandatory
Target audience
Network engineers and administrators responsible for enterprise infrastructure security
Professionals preparing for the 350-701 SCOR CCNP Security core exam
Security engineers responsible for firewalls, VPNs, network access and Cisco Secure solutions
Architects and consultants designing resilient Cisco security architectures
Advanced operations, SOC and support teams
The exam
The 350-701 SCOR (Implementing and Operating Cisco Security Core Technologies) is the core exam in the CCNP Security track. It lasts 120 minutes and is delivered in English through Pearson VUE, at a test center or online. Tested domains include security architecture, secure access, infrastructure security, secure connectivity, content security, endpoint protection, monitoring and automation. Passing SCOR and one concentration exam is required to earn CCNP Security. Cisco does not publish a fixed passing score; the required score may vary by exam version.
Preparation tips
Review networking, cryptography and Cisco IOS fundamentals before tackling advanced security solutions
Build lab topologies and practice configuration and failure scenarios until you can isolate them methodically
Learn the verification commands, but focus especially on interpreting logs, policies and troubleshooting output
Study the interactions between identity, segmentation, firewalls, VPNs, endpoints and detection instead of treating each technology in isolation
Practice with timed questions and review every uncertain answer
Become familiar with Cisco APIs, data models and automation concepts before the exam
Frequently asked questions (FAQ)
Is 350-701 SCOR alone enough to earn CCNP Security?
No. CCNP Security is earned by passing the 350-701 SCOR core exam and one concentration exam. This course focuses on the SCOR exam.
What experience is recommended before this course?
Practical experience with networking, Cisco IOS, firewalls, VPNs and troubleshooting is strongly recommended. Knowledge covered by CCNA provides a suitable foundation.
Does the course include hands-on labs?
Yes. Labs cover firewall policies, VPNs, Cisco ISE, segmentation, content security, network visibility and event analysis.
Does 350-701 SCOR cover automation?
Yes. The outline covers REST APIs, JSON, Python, data models, Cisco SecureX integration and configuration and compliance automation.
Is the exam available in French?
The Cisco 350-701 exam is generally delivered in English through Pearson VUE. Check the language options available when registering with Cisco or Pearson VUE.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a training partner of Cisco. Cisco, CCNP Security and SCOR are trademarks of Cisco.