Skip to content

350-701 Implementing and Operating Cisco Security Core Technologies (SCOR) Practice Questions

Prepare for 350-701 with more than an answer.

178 questions in the full set20 sample questionsUpdated Jan 30, 2026

Unlock the full exam and previous versions

  • v1Version 1 178 questions Current
  • 300-206Legacy Security Implementing Cisco Edge Network Security Solutions (SENSS) 270 questions Locked
Exam fee
$400 USD
Level
Professional/Expert
Valid for
3 years
Domains covered on the exam 6
  1. Security Concepts25%
  2. Network Security20%
  3. Securing the Cloud15%
  4. Content Security15%
  5. Endpoint Protection and Detection10%
  6. Secure Network Access, Visibility, and Enforcement15%
  1. 1

    How is DNS tunneling used to exfiltrate data out of a corporate network?

    Show answer details

    Correct answer: B

  2. 2

    Which type of attack is social engineering?

    Show answer details

    Correct answer: C

  3. 3

    What are two DDoS attack categories? (Choose two.)

    Show answer details

    Correct answer: A, E

  4. 4

    In which type of attack does the attacker insert their machine between two hosts that are communicating with each other?

    Show answer details

    Correct answer: A

  5. 5

    A network administrator is configuring Control Plane Policing (CoPP) on a Cisco IOS XE router to protect against SSH brute-force attacks. Which three configuration elements are required to build the CoPP policy? (Select THREE)

    flowchart TD A[Traffic Ingress] --> B{Match Criteria}; B -- SSH --> C[Class-Map: SSH_CLASS]; C --> D[Policy-Map: COPP_POLICY]; D -- Rate-Limit --> E[Police Action]; E --> F[Control Plane]; B -- Other --> F;
    Show answer details

    Correct answer: A, B, C

    An access-list is needed to define the 'interesting' traffic to be policed, in this case, SSH traffic (TCP port 22) destined for the router's control plane.

    A class-map is used to associate the classification criteria (the access-list) with a named class that can be referenced in a policy-map.

    The policy-map is where the action is defined. For the class matching SSH traffic, a 'police' action is configured to rate-limit the traffic to a specific value, dropping excess packets.

  6. 6

    Which functions of an SDN architecture require southbound APIs to enable communication?

    Show answer details

    Correct answer: A

  7. 7

    Which two request methods of REST API are valid on the Cisco ASA Platform? (Choose two.)

    Show answer details

    Correct answer: A, C

  8. 8

    The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?

    Show answer details

    Correct answer: D

  9. 9

    What is a feature of the open platform capabilities of Cisco DNA Center?

    Show answer details

    Correct answer: C

  10. 10

    Refer to the exhibit. What does the API do when connected to a Cisco security appliance?

    Question exhibit
    Show answer details

    Correct answer: D

Create an account to continue.