Cisco CCNP Security SCOR 350-701 - All Domains Network Security Cloud Endpoint Visibility

By Riley Santos · Updated Jul 10, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged1,761
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.3 (39)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A security engineer is hardening a Cisco router. Which combination of configurations reduces the attack surface on management plane access?

Answer choices

  • A. Enable Telnet on all interfaces, disable SSH

  • B. Use SSH version 2, apply ACLs to VTY lines, enable AAA authentication, and set exec timeouts

  • C. Enable HTTP management on port 80, configure SNMP community string "public"

  • D. Disable all authentication to simplify troubleshooting

Question 2

A firewall engineer is configuring Cisco Secure Firewall (FTD) and needs to allow internal users to access the internet while blocking all unsolicited inbound connections. The firewall also needs to inspect return traffic automatically. Which firewall feature handles this automatically?

Answer choices

  • A. Access Control Lists (ACLs) with explicit permit for return traffic

  • B. Stateful inspection tracking connection state in the state table

  • C. NAT with static one-to-one mappings for all internal hosts

  • D. Application layer gateway (ALG) for all protocols

Question 3

What differentiates a next-generation IPS (NGIPS) from a traditional signature-based IPS?

Answer choices

  • A. NGIPS uses only signature matching; traditional IPS uses behavior-based anomaly detection

  • B. NGIPS correlates network context (user identity, application, device type) with signatures to reduce false positives

  • C. NGIPS operates at Layer 2 only; traditional IPS inspects up to Layer 7

  • D. NGIPS requires hardware appliances; traditional IPS can run as software

Question 4

What is the primary function of Cisco Umbrella's DNS-layer security?

Answer choices

  • A. It encrypts all DNS queries using DNS-over-HTTPS to prevent eavesdropping

  • B. It blocks connections to malicious domains at the DNS resolution stage, before any TCP/IP connection is established

  • C. It caches DNS responses to improve performance and reduce latency

  • D. It provides authoritative DNS resolution for internal corporate domains

Question 5

A security engineer is reviewing a Cisco FTD connection event and notices traffic on port 443 to an external IP flagged as a Tor exit node. The certificate subject name is `*.malicious-c2.io`. Which two actions should the engineer take? (Choose TWO)

Answer choices

  • A. Block the IP address and domain in the ACP with a blacklist rule

  • B. Investigate the internal host for compromise indicators using Cisco Secure Endpoint

  • C. Increase the MTU on the firewall interface to improve inspection performance

  • D. Enable SSL decryption policy for Tor traffic to inspect the full payload

  • E. Archive the connection log for annual compliance review