Free Demo
Cisco 350-701 SCOR: Skills Outline
The Cisco 350-701 exam evaluates the applicants’ expertise in various technical areas. The skills measured in this certification test are combined in a number of objectives, which are listed below:
- Content Security (10%)
Answering the questions from this section requires your familiarity with implementing traffic redirection and capture methods, describing web proxy identity and authentication, comparing the components, benefits, and capabilities of Cloud-based and local web and email solutions, verifying and configuring email and web security deployment methods to protect remote and on-premises users, verifying and validating email security features, verifying and configuring web security features and secure internet gateway, and describing the benefits, components, and capabilities of Cisco Umbrella.
- Cloud Security (15%)
The questions from this domain evaluate various skills, including one’s ability to identify security solutions for the Cloud environments, including community, public, hybrid, and private Clouds. The topic also tests your capability to explain workload and application security concepts, customize Cloud monitoring and logging methodologies, define deployment models, security capabilities, and policy management to ensure the security of Cloud. Additionally, the learners are required to show their knowledge of implementing data security and application in Cloud, describing the concepts of DevSecOps, identifying security solutions for the Cloud environments, and Cloud service models, such as SaaS, IaaS, and PaaS.
- Endpoint Protection & Detection (15%)
This domain includes such technical skills as comparing Endpoint Detection and Response, as well as Endpoint Protection Platform solutions, explaining retrospective security, antimalware, antivirus, IOC, dynamic file analysis, and endpoint-sourced telemetry, explaining the importance of the endpoint patching strategy, describing endpoint posture assessment solutions, and explaining the value of asset inventory such as MDM.
- Network Security (20%)
This objective evaluates the test takers’ competency in comparing network security solutions that provide firewall capabilities and intrusion prevention, describing the deployment models of network security architectures and solutions that provide firewall capabilities and intrusion prevention, describing the components, benefits, and capabilities of Flexible NetFlow records, and verifying and configuring network infrastructure security methods (wireless, switch, router). They also need to demonstrate their knowledge of Layer 2 methods, which include network segmentation using VRF-lite and VLANs; DHCP snooping, Layer 2 and port security, storm control, Dynamic ARP inspection, defense against ARP, MAC, VLAN hopping, and DHCP rogue attacks.
- Secure Network Access (15%)
Within this objective, the examinees need to demonstrate their competency in describing the benefits of network telemetry, explaining exfiltration techniques, describing network access with CoA, and describing secure network access and identity management.
- Security Concepts (25%)
This subject area covers the learners’ proficiency in explaining DNAC APIs for network provisioning, troubleshooting, monitoring, and optimization, interpreting basic Python scripts used in calling Cisco Security appliances APIs, and describing South Bound and North Bound APIs in the SDN building. They are also required to demonstrate their ability to explain how endpoint helps the individuals overcome social engineering and phishing attacks, describe security intelligence authoring, consumption, and sharing, and compare remote access VPN and site-to-site VPN deployment types, such as DMVPN, Crypto map, IPsec, sVTI, FLEXVPN, including AnyConnect and high availability.
This area also assesses the candidates’ expertise in comparing common security vulnerabilities such as software bugs, hardcoded and/or weak passwords, path traversal, buffer overflow, cross-site scripting/forgery, and missing encryption. Their ability to explain common threats against Cloud and on-premises environments is also tested within this domain.
The Cisco 350-701 SCOR exam tests the candidates' knowledge of operating and implementing core security technologies such as network or cloud security, content security, or endpoint protection and detection.
Cisco 350-701 Exam Topics:
| Section | Weight | Objectives |
|---|---|---|
| Endpoint Protection and Detection | 10% | 1.Compare Endpoint Protection Platforms (EPP) and Endpoint Detection & Response (EDR) solutions 2.Explain antimalware, retrospective security, Indication of Compromise (IOC), antivirus, dynamic file analysis, and endpoint-sourced telemetry 3.Configure and verify outbreak control and quarantines to limit infection 4.Describe justifications for endpoint-based security 5.Describe the value of endpoint device management and asset inventory such as MDM 6.Describe the uses and importance of a multifactor authentication (MFA) strategy 7.Describe endpoint posture assessment solutions to ensure endpoint security 8.Explain the importance of an endpoint patching strategy |
| Content Security | 15% | 1.Implement traffic redirection and capture methods 2.Describe web proxy identity and authentication including transparent user identification 3.Compare the components, capabilities, and benefits of local and cloud-based email and web solutions (ESA, CES, WSA) 4.Configure and verify web and email security deployment methods to protect on-premises and remote users (inbound and outbound controls and policy management) 5.Configure and verify email security features such as SPAM filtering, antimalware filtering, DLP, blacklisting, and email encryption 6.Configure and verify secure internet gateway and web security features such as blacklisting, URL filtering, malware scanning, URL categorization, web application filtering, and TLS decryption 7.Describe the components, capabilities, and benefits of Cisco Umbrella 8.Configure and verify web security controls on Cisco Umbrella (identities, URL content settings, destination lists, and reporting) |
| Secure Network Access, Visibility, and Enforcement | 15% | 1.Describe identity management and secure network access concepts such as guest services, profiling, posture assessment and BYOD 2.Configure and verify network access device functionality such as 802.1X, MAB, WebAuth 3.Describe network access with CoA 4.Describe the benefits of device compliance and application control 5.Explain exfiltration techniques (DNS tunneling, HTTPS, email, FTP/SSH/SCP/SFTP, ICMP, Messenger, IRC, NTP) 6.Describe the benefits of network telemetry 7.Describe the components, capabilities, and benefits of these security products and solutions
|
| Network Security | 20% | 1. Compare network security solutions that provide intrusion prevention and firewall capabilities 2.Describe deployment models of network security solutions and architectures that provide intrusion prevention and firewall capabilities 3.Describe the components, capabilities, and benefits of NetFlow and Flexible NetFlow records 4.Configure and verify network infrastructure security methods (router, switch, wireless)
5.Implement segmentation, access control policies, AVC, URL filtering, and malware protection
|
| Securing the Cloud | 15% | 1.Identify security solutions for cloud environments
2.Compare the customer vs. provider security responsibility for the different cloud service models
3.Describe the concept of DevSecOps (CI/CD pipeline, container orchestration, and security |
| Security Concepts | 25% | 1.Explain common threats against on-premises and cloud environments
2.Compare common security vulnerabilities such as software bugs, weak and/or hardcoded passwords, SQL injection, missing encryption, buffer overflow, path traversal, cross-site scripting/forgery |
Secure Network Visibility, Access, and Enforcement – 15%
- Explaining identity management & secure network access concepts, such as profiling, posture assessment, guest services, as well as BYOD;
- Explaining the capacity, benefits, and components of the security products & solutions, such as Cisco Stealthwatch, Cisco Umbrella Investigate, Cisco Stealthwatch Cloud, Cisco pxGrid, and others.
- Configuring and verifying the function of network access device, such as 802.1X, WebAuth, and MAB;
- Explaining network access with the use of CoA;
- Describing the exfiltration methods, including HTTPS, IRC, DNS tunneling, email, Messenger, and others;
- Explaining the device compliance & application control benefits;
- Describing the network telemetry benefits;
Free update within one year
We provide free update to the clients within one year. The clients can get more 350-701 guide materials to learn and understand the latest industry trend. We boost the specialized expert team to take charge for the update of 350-701 practice guide timely and periodically. They refer to the excellent published authors' thesis and the latest emerging knowledge points among the industry to update our 350-701 training materials. After one year, the clients can enjoy 50 percent discounts and the old clients enjoy some certain discounts when purchasing. So the clients can enjoy more benefits after they buy our 350-701 guide materials.
Nowadays the knowledge capabilities and mental labor are more valuable than the manual labor because knowledge can create more wealth than the mental labor. If you boost professional knowledge capabilities in some area you are bound to create a lot of values and can get a good job with high income. Passing the test of Cisco certification can help you achieve that, and our 350-701 training materials are the best study materials for you to prepare for the test. Our 350-701 guide materials combine the key information about the test in the past years' test papers and the latest emerging knowledge points among the industry to help the clients both solidify the foundation and advance with the times. We give priority to the user experiences and the clients' feedback, 350-701 practice guide will constantly improve our service and update the version to bring more conveniences to the clients and make them be satisfied. The clients' satisfaction degrees about our 350-701 training materials are our motive force source to keep forging ahead. Now you can have an understanding of our 350-701 guide materials.
Pragmatic test practice software
To let the clients have an understanding of their mastery degree of our 350-701 guide materials and get a well preparation for the test, we provide the test practice software to the clients. The test practice software of 350-701 practice guide is based on the real test questions and its interface is easy to use. The test practice software boosts the test scheme which stimulate the real test and boost multiple practice models, the historical records of the practice of 350-701 training materials and the self-evaluation function. The test software can help you practice the real 350-701 questions. The clients can define the environment of the practice to adjust to their learning goals by themselves. Thus we can guarantee that you can get a high score in the test if you use our 350-701 guide materials.
Pay high attention to the user experiences
Our service tenet is to let the clients get the best user experiences and be satisfied. From the research, compiling, production to the sales, after-sale service, we try our best to provide the conveniences to the clients and make full use of our 350-701 guide materials. We organize the expert team to compile the 350-701 practice guide elaborately and constantly update them. To let the clients have a fundamental understanding of our 350-701 training materials, we provide the free trials before their purchasing. To save the clients' time, we send the products in the form of mails to the clients in 5-10 minutes after they purchase our 350-701 practice guide and we simplify the information to let the client only need dozens of hours to learn and prepare for the test. To help the clients solve the problems which occur in the process of using our 350-701 guide materials, the clients can consult u about the issues about our study materials at any time. To make the clients get a systematically and targeted learning, we provide multiple functions in our software. So we can say that our 350-701 training materials are people-oriented and place the clients' experiences in the prominent position.
Bruno 
Riva 
Arthur 
Kyle 
Evan 
Upton 
Brady 
Zebulon 
Ingram 
Valentina 
Tim 
Gabriel 
Phoebe 
Warner 
