350-701 Implementing and Operating Cisco Security Core Technologies (SCOR) Practice Questions
Prepare for 350-701 with more than an answer.
Unlock the full exam and previous versions
- v1Version 1 178 questions Current
- 300-206Legacy Security Implementing Cisco Edge Network Security Solutions (SENSS) 270 questions Locked
- Exam fee
- $400 USD
- Level
- Professional/Expert
- Valid for
- 3 years
Domains covered on the exam 6
- Security Concepts25%
- Network Security20%
- Securing the Cloud15%
- Content Security15%
- Endpoint Protection and Detection10%
- Secure Network Access, Visibility, and Enforcement15%
- 1
How is DNS tunneling used to exfiltrate data out of a corporate network?
Show answer details
Correct answer: B
- 2
Which type of attack is social engineering?
Show answer details
Correct answer: C
- 3
What are two DDoS attack categories? (Choose two.)
Show answer details
Correct answer: A, E
- 4
In which type of attack does the attacker insert their machine between two hosts that are communicating with each other?
Show answer details
Correct answer: A
- 5
A network administrator is configuring Control Plane Policing (CoPP) on a Cisco IOS XE router to protect against SSH brute-force attacks. Which three configuration elements are required to build the CoPP policy? (Select THREE)
flowchart TD A[Traffic Ingress] --> B{Match Criteria}; B -- SSH --> C[Class-Map: SSH_CLASS]; C --> D[Policy-Map: COPP_POLICY]; D -- Rate-Limit --> E[Police Action]; E --> F[Control Plane]; B -- Other --> F;Show answer details
Correct answer: A, B, C
An access-list is needed to define the 'interesting' traffic to be policed, in this case, SSH traffic (TCP port 22) destined for the router's control plane.
A class-map is used to associate the classification criteria (the access-list) with a named class that can be referenced in a policy-map.
The policy-map is where the action is defined. For the class matching SSH traffic, a 'police' action is configured to rate-limit the traffic to a specific value, dropping excess packets.
- 6
Which functions of an SDN architecture require southbound APIs to enable communication?
Show answer details
Correct answer: A
- 7
Which two request methods of REST API are valid on the Cisco ASA Platform? (Choose two.)
Show answer details
Correct answer: A, C
- 8
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
Show answer details
Correct answer: D
- 9
What is a feature of the open platform capabilities of Cisco DNA Center?
Show answer details
Correct answer: C
- 10
Refer to the exhibit. What does the API do when connected to a Cisco security appliance?

Show answer details
Correct answer: D
