350-701.AP2
CCNP SCOR Course: Mastering Cisco Security Core Technologies
If you’re going to prepare for the CCNP SCOR exam, learn it right—interactive, engaging, and built to make you unstoppable.
- Practice in 60 Hands-On Labs — nothing to install
- 13 Interactive Lessons and 98 topics mapped to the official exam objectives
- 694 Practice Test Questions and 2 Full Length Tests
Expert Self-paced · 1 year access
60 Hands-On LiveLabs
Practice real IT tasks in guided environments.
- Real environments
- Auto-graded
- No installation
13Interactive Lessons
98Topics
60LiveLab
694Practice Test Questions
10Videos
163Flashcards
163Glossary of terms
01 / Skills you'll get
What you will be able to do
Try Free →
No credit card required
Enroll in our CCNP Security course to master the skills needed to ace the 350-701 exam.
In this course, dive into network security, cloud security, and endpoint protection while learning to implement firewalls, VPNs, and zero-trust policies. Get hands-on with Cisco Secure Firewall, ISE, and Secure Endpoint.
From cryptography to threat detection, you’ll train with bite-sized lessons, quizzes, and practice exams, so you can apply what you memorize to real-world problems.
- Enterprise Network Security Implementation: Design and deploy robust security architectures for modern networks.
- Cloud & Endpoint Threat Defense: Secure cloud environments and endpoints using Cisco Umbrella, Secure Workload, and Secure Endpoint.
- Zero-Trust Network Access (ZTNA) Enforcement: Configure AAA, ISE, and segmentation for secure access control.
- Advanced Firewall & VPN Configuration: Master Cisco Secure Firewall policies, intrusion prevention, and site-to-site/remote-access VPNs.
- Security Visibility & Analytics: Leverage NetFlow, Cisco Encrypted Traffic Analysis (ETA), and Secure Network Analytics for real-time threat detection.
- Incident Response & Automation: Apply forensics, automation, and DevSecOps principles to streamline security operations.
Course Highlights
-
13 Structured Lessons Comprehensive coverage of core course objectives
-
60 Hands-On LiveLabs Interactive guided scenarios with instant evaluation
-
694 Practice Questions Assessment tests with detailed answer rationales
-
1 Year Full Access Self-paced learning accessible anytime on all devices
02 / Lessons & labs
See exactly what you will learn and practice
Lessons
13 Interactive Lessons · 98 topics01 Introduction 5 topics +
- The CCNP Security Certification
- The CCIE Security Certification
- The Exam Objectives (Domains)
- Steps to Pass the SCOR Exam
- Facts About the Exam
02 Cybersecurity Fundamentals 9 topics · 4 LiveLab +
- Introduction to Cybersecurity
- Defining What Are Threats, Vulnerabilities, and Exploits
- Common Software and Hardware Vulnerabilities
- Confidentiality, Integrity, and Availability
- Cloud Security Threats
- IoT Security Threats
- An Introduction to Digital Forensics and Incident Response
- Summary
- Review All Key Topics
4 LiveLab in this lesson — see the labs panel →
03 Cryptography 3 topics · 3 LiveLab +
- Introduction to Cryptography
- Fundamentals of PKI
- Review All Key Topics
3 LiveLab in this lesson — see the labs panel →
04 Software-Defined Networking Security and Network Programmability 3 topics · 1 LiveLab +
- Software-Defined Networking (SDN) and SDN Security
- Introduction to Network Programmability
- Review All Key Topics
1 LiveLab in this lesson — see the labs panel →
05 Authentication, Authorization, Accounting (AAA) and Identity Management 11 topics · 2 LiveLab +
- Introduction to Authentication, Authorization, and Accounting
- Authentication
- Authorization
- Accounting
- Infrastructure Access Controls
- AAA Protocols
- Cisco Identity Services Engine (ISE)
- Configuring TACACS+ Access
- Configuring RADIUS Authentication
- Additional Cisco ISE Design Tips
- Review All Key Topics
2 LiveLab in this lesson — see the labs panel →
06 Network Visibility and Segmentation 13 topics · 5 LiveLab +
- Introduction to Network Visibility
- NetFlow
- IP Flow Information Export (IPFIX)
- NetFlow Deployment Scenarios
- Cisco Secure Network Analytics and Cisco Secure Cloud Analytics
- Cisco Cognitive Intelligence and Cisco Encrypted Traffic Analytics (ETA)
- NetFlow Collection Considerations and Best Practices
- Configuring NetFlow in Cisco IOS and Cisco IOS-XE
- Configuring NetFlow in NX-OS
- Introduction to Network Segmentation
- Micro-segmentation with Cisco ACI
- Segmentation with Cisco ISE
- Review All Key Topics
5 LiveLab in this lesson — see the labs panel →
07 Infrastructure Security 13 topics · 19 LiveLab +
- Securing Layer 2 Technologies
- Common Layer 2 Threats and How to Mitigate Them
- Network Foundation Protection
- Understanding and Securing the Management Plane
- Understanding the Control Plane
- Understanding and Securing the Data Plane
- Securing Management Traffic
- Implementing Logging Features
- Configuring NTP
- Securing the Network Infrastructure Device Image and Configuration Files
- Securing the Data Plane in IPv6
- Securing Routing Protocols and the Control Plane
- Review All Key Topics
19 LiveLab in this lesson — see the labs panel →
08 Cisco Secure Firewall 9 topics · 7 LiveLab +
- Introduction to Cisco Secure Firewall
- Comparing Network Security Solutions That Provide Firewall Capabilities
- Deployment Modes of Network Security Solutions and Architectures That Provide Firewall Capabilities
- High Availability and Clustering
- Implementing Access Control
- Cisco Firewall Intrusion Policies
- Cisco Secure Malware Defense
- Security Intelligence, Security Updates, and Keeping Firepower Software Up to Date
- Review All Key Topics
7 LiveLab in this lesson — see the labs panel →
09 Virtual Private Networks (VPNs) 10 topics · 15 LiveLab +
- Virtual Private Network (VPN) Fundamentals
- Deploying and Configuring Site-to-Site VPNs in Cisco Routers
- Configuring Site-to-Site VPNs in Cisco ASA Firewalls
- Configuring Remote-Access VPNs in the Cisco ASA
- Configuring Clientless Remote-Access SSL VPNs in the Cisco ASA
- Configuring Client-Based Remote-Access SSL VPNs in the Cisco ASA
- Configuring Remote-Access VPNs in Cisco Secure Firewall
- Configuring Site-to-Site VPNs in the Cisco Secure Firewall
- Cisco SD-WAN
- Review All Key Topics
15 LiveLab in this lesson — see the labs panel →
10 Securing the Cloud 11 topics · 2 LiveLab +
- What Is Cloud and What Are the Cloud Service Models?
- DevOps, Continuous Integration (CI), Continuous Delivery (CD), and DevSecOps
- Describing the Customer vs. Provider Security Responsibility for the Different Cloud Service Models
- Cisco Umbrella
- Cisco Secure Email Threat Defense
- Cisco Attack Surface Management (Formerly Cisco Secure Cloud Insights)
- Cisco Secure Cloud Analytics
- AppDynamics Cloud Monitoring
- Cisco Secure Workload
- Cisco XDR
- Review All Key Topics
2 LiveLab in this lesson — see the labs panel →
11 Content Security 5 topics · 1 LiveLab +
- Content Security Fundamentals
- Cisco Secure Web Appliance
- Cisco Secure Email
- Cisco Content Security Management Appliance (SMA)
- Review All Key Topics
1 LiveLab in this lesson — see the labs panel →
12 Endpoint Protection and Detection 4 topics · 1 LiveLab +
- Introduction to Endpoint Protection and Detection
- Cisco Secure Endpoint
- Cisco Threat Response
- Review All Key Topics
1 LiveLab in this lesson — see the labs panel →
13 Final Preparation 2 topics +
- Hands-on Activities
- Summary
Hands-On Labs Our edge
60 LiveLabs- Searching for Exploits Using SearchSploit
- Performing SQL Injection in DVWA
- Performing an XSS Attack in DVWA
- Conducting Vulnerability Scanning Using Nessus
- Configuring IPsec
- Generating an RSA Key Pair
- Generating an Asymmetric Key
- Using the curl Command
- Configuring the AAA Router for TACACS+ Authentication
- Strengthening Organizational Security Through Cybersecurity Fundamentals
- Configuring a Flow Record
- Configuring a Flow Monitor for IPv4
- Defining a Flow Record in Cisco NX-OS
- Defining a Flow Monitor with a Custom Record in Cisco NX-OS
- Defining a Flow Exporter in Cisco NX-OS
- Configuring Interfaces as Trunk Ports
- Configuring PortFast and Rapid Spanning Tree
- Configuring Router-on-a-Stick and Switch Support for a Router
- Implementing BPDU Guard on a Switch Port
- Implementing Port Security
- Locking Down Switch Ports Administratively
- Configuring DHCP Snooping
- Preparing SSH in a Router
- Enabling AAA Services and Working with Method Lists
- Creating and Working with Parser Views
- Configuring a Router to Use NTP Services
- Creating a Secure Bootset
- Configuring the IPv6 ACL
- Configuring IPv6
- Configuring and Displaying Control Plane Policing
- Configuring the BGP MD5 Authentication Process between BGP Peers
- Configuring the OSPF MD5 Authentication Process
- Configuring the RIPv2 MD5 Authentication Process
- Configuring the EIGRP MD5 Authentication Process
- Configuring the Cisco ASA To-The-Box Traffic Filtering
- Configuring Static NAT
- Configuring a Standard ACL
- Configuring Dynamic PAT
- Configuring Dynamic NAT
- Configuring Cisco ASA Application Inspection
- Strengthening Exam Readiness Through Expert Guidance
- Configuring the GRE Tunnel Interface
- Configuring a Site-to-Site IPsec VPN Topology
- Implementing IPsec VPNs through CLI
- Configuring and Viewing DMVPN Phase 1
- Creating the IP Pool for VPN Clients
- Configuring the Cisco ASA VPN IKEv2 Policy, IPsec Policy, and Dynamic Crypto Map
- Configuring the Group Policy in the Cisco ASA
- Creating the Tunnel Group for Remote Access VPN Clients
- Enrolling in the Manual Certificate
- Configuring Clientless SSL VPNs on ASA
- Configuring a Tunnel Group for Clientless SSL VPN
- Configuring the Cisco ASA to Authenticate Users Using a RADIUS Server
- Defining a WebType ACL
- Defining the RADIUS Server for Client-Based SSL VPN
- Configuring Split Tunneling
- Using Docker
- Troubleshooting Kubernetes
- Configuring PBR in a Cisco Router
- Preparing for a Collaborative Security Exam
Labs run in your browser — nothing to install.
03 / FAQs
Questions before you start
What is the CCNP SCOR certification?+
The CCNP SCOR (350-701) is the core exam for Cisco’s CCNP Security and CCIE Security certifications. It validates expertise in implementing and operating core security technologies, including:
- Network security (firewalls, intrusion prevention)
- Cloud security (SaaS/PaaS/IaaS models, DevSecOps)
- Endpoint protection (Cisco Secure Endpoint, EDR/EPP)
- Secure network access (AAA, ISE, Zero Trust)
- Visibility & enforcement (Cisco Umbrella, Secure Network Analytics)
Passing the SCOR exam earns the Cisco Certified Specialist - Security Core title and counts toward CCNP/CCIE Security recertification.
Is CCNP difficult to pass?+
Yes, the CCNP Security (SCOR 350-701) is considered challenging due to:
- Depth of topics: Covers advanced security concepts beyond CCNA-level knowledge.
- Study duration: 40% of candidates need 5+ months to prepare, while only 15% pass in under 6 weeks. Hands-on experience with Cisco security tools significantly reduces preparation time.
- Exam rigor: 90–110 questions in 120 minutes, with a passing score of ~750–850/1000
What is the salary of a CCNP Security Specialist per year?+
As of 2024, the annual salary for a CCNP Security-certified specialist in the United States typically ranges between $95,000 and $145,000, depending on factors such as experience, location, and employer size. Some sources indicate that top professionals with this certification can earn up to $205,000 annually.
Keep going
You might also like
Prepare for the 350-701 SCOR Exam
Build elite Cisco security skills and raise your salary, because attackers never rest, and neither should your defenses.
- 1 year of full access
- 60 LiveLab included
- Certificate of completion
No credit card required