Cisco Certified Network Professional Security (CCNP Security) Core
350-701 SCOR · ● Active · Professional · Cisco
The core exam for CCNP Security and a qualifying exam for CCIE Security. Tests implementation and operation of modern security infrastructure across network, cloud, endpoint, and access domains. Requires a concentration exam to complete the CCNP Security certification.
Exam facts
| Field | Value |
|---|---|
| Cost | $400 USD |
| Duration | 120 minutes |
| Questions | 90–110 (varies by exam session) |
| Passing | Scaled score (typically 700+/1000) |
| Format | Multiple choice, multiple response, drag-and-drop, fill-in-the-blank |
| Delivery | Pearson VUE (online proctored or testing center) |
| Languages | English, Japanese |
| Valid | 3 years |
| Renewal | CE credits (40 required per 3-year period) or recertification exam |
| Prerequisites | None formally required; 3–5 years security engineering experience recommended |
| Released | January 2019 (current version v1.1) |
| Retiring | N/A — actively maintained |
Vendor source — Cisco SCOR Exam Page ↗ Exam objectives — Cisco Learning Network SCOR Topics ↗ Official guide PDF — Cisco Exam Topics v1.1 ↗
About
The 350-701 SCOR (Implementing and Operating Cisco Security Core Technologies) is the mandatory core exam for Cisco Certified Network Professional (CCNP) Security certification. Introduced in January 2019, it replaces the legacy Security exam and tests hands-on implementation and operation of Cisco security technologies spanning network security (firewalls, IDS/IPS), cloud security, content filtering, endpoint detection, secure access, and visibility. A candidate must pass 350-701 SCOR plus one concentration exam (choice of six: SNCF, SISE, SESA, SWSA, SVPN, or SAUTO) to earn CCNP Security. The exam is a qualifying exam for CCIE Security and carries forward the professional-level rigor expected in security engineering roles.
Domain context — Security
Network, endpoint, and cloud security across enterprise and hybrid environments. Cisco ecosystem focus: Firepower, ISE, Secure Email, secure web, VPN, and security automation platforms.
Read full deep dive — Cisco Ecosystem ↗
Topics covered
Based on official Cisco exam blueprint v1.1:
-
Domain 1: Security Concepts (25%)
- Threat landscape and attack vectors
- Cryptography, SSL/TLS, certificates
- Authentication and authorization frameworks
- Security policies and compliance
-
Domain 2: Network Security (20%)
- Firewalls and firewall rule design
- IDS/IPS concepts and deployment
- DDoS mitigation
- VPN technologies (site-to-site, remote-access)
-
Domain 3: Securing the Cloud (15%)
- Cloud security architecture
- AWS, Azure, GCP security considerations
- Cloud IAM and access control
- Secure cloud migrations
-
Domain 4: Content Security (10%)
- Web security and SSL inspection
- Email security and malware filtering
- Data loss prevention (DLP)
- Web application firewalls
-
Domain 5: Endpoint Protection and Detection (15%)
- Antimalware and anti-ransomware
- Endpoint detection and response (EDR)
- Mobile device management
- Patch and vulnerability management
-
Domain 6: Secure Network Access, Visibility, and Enforcement (15%)
- Identity Services Engine (ISE) architecture and policy
- Network access control (NAC)
- Secure access service edge (SASE)
- Threat visibility and telemetry
Source: Cisco Learning Network SCOR Exam Blueprint ↗
Common skills at Security · Professional
Shared content for the Security domain at Professional level — not specific to this cert.
- Firewall rule creation and stateful inspection
- VPN protocol implementation (IPsec, SSL)
- IDS/IPS tuning and alert correlation
- Security operations center (SOC) workflows
- Incident response and threat hunting
- Risk assessment and security architecture design
Recommended courses at Security · Professional
| Provider | Title | Cost | URL |
|---|---|---|---|
| Cisco U Training | CCNP Security SCOR | Varies | ↗ |
| CBT Nuggets | CCNP Security SCOR (350-701) | $49–$79/mo | ↗ |
| INE | CCNP Security Core (SCOR) | $199–$399 | ↗ |
| Udemy | CCNP Security SCOR 350-701 (multiple instructors) | $13–$80 | ↗ |
| Pluralsight | Cisco SCOR (350-701) for CCNP Security | $299+/yr | ↗ |
| LinkedIn Learning | CCNP Security SCOR Exam Prep | $30–$40/mo | ↗ |
| Jeremy's IT Lab | CCNP Security (YouTube/comprehensive) | Free (+ paid) | ↗ |
Practice exams
| Provider | Title | Cost | URL |
|---|---|---|---|
| Pearson Test Prep | CCNP and CCIE Security Core SCOR 350-701 Practice Exams | $99 | ↗ |
| Boson ExSim-Max | Cisco CCNP Security Core (SCOR 350-701) | $129 | ↗ |
| Whizlabs | CCNP Security SCOR (350-701) | $79–$99 | ↗ |
| Cisco Learning Network | Official practice questions (limited free) | Free–$99 | ↗ |
Books
| Title | Author | Publisher | Year | ISBN | URL |
|---|---|---|---|---|---|
| CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, 2nd Edition | Omar Santos | Cisco Press | 2024 | 978-0138221263 | ↗ |
| CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, 1st Edition | Omar Santos | Cisco Press | 2020 | 978-0135971970 | ↗ |
Book note: The 2nd Edition (2024) aligns with exam blueprint v1.1 and is the current recommended reference. The 1st Edition (2020) covers the same exam code but with older examples and may lack recent cloud/endpoint updates.
Typical job titles at Security · Professional
Network Security Engineer · Cybersecurity Engineer (Network) · Firewall/IPS Engineer · Security Operations Engineer · Cloud Security Engineer · Incident Response Specialist · Security Architect (emerging with experience)
(Job titles drawn from current job-board postings that list CCNP Security or 350-701 as required or preferred.)
Salary
| Region | Range | Source |
|---|---|---|
| USD | $125,000–$165,720 (avg) | Glassdoor Network Security Engineer ↗ · PayScale CCNP Security ↗ |
| ZAR | R180,000–R320,000 (est.) | No CCNP-specific South African salary data available; extrapolated from Pnet networking roles requiring CCNP-level skills |
| GBP | £75,000–£105,000 (est.) | IT Jobs Watch ↗ · Hays Salary Guide ↗ (security engineer bands) |
| EUR | €80,000–€120,000 (DE/NL/FR est.) | PayScale Europe ↗ |
| AUD | A$115,000–A$155,000 (est.) | Seek ↗ (security engineer + CCNP premium) |
Salary notes: USD figures reflect Glassdoor's 2026 Network Security Engineer average ($165,720) adjusted downward for mid-career roles without advanced architecture certs. PayScale reports $125,000 for CCNP Security holders specifically. Regional data is interpolated from general security engineering salaries where cert-specific surveys are unavailable. Experience (3–5 years baseline, 7–10 years for leadership) and geography heavily influence actual offers.
Skills validated
Concrete technologies and protocols this exam tests.
- Cisco Firepower (formerly Firepower Threat Defense / FTD)
- Cisco Secure Firewall Management Center (FMCM)
- Cisco Identity Services Engine (ISE)
- Cisco Secure Email (formerly Email Security Appliance)
- Cisco Secure Web Gateway (formerly Web Security Appliance)
- IPsec and SSL/TLS VPN implementation
- Intrusion prevention system (IPS) tuning and rules
- Cisco Advanced Malware Protection (AMP)
- Cisco Talos threat intelligence
- Network access control (NAC) and 802.1X
- Cisco Secure SASE platform (including cloud security)
- RESTful APIs for security automation (basic)
- Security information and event management (SIEM) integration
Related certifications
- Prerequisite knowledge for: CCNP Security Concentration Exams ↗ (SNCF, SISE, SESA, SWSA, SVPN, SAUTO — one required)
- Leads to: [CCIE Security ↗]({file not yet created}) (requires CCNP Security + additional hands-on labs)
- Stacks with: [CCNP DevNet ↗]({file not yet created}) (through shared 300-735 SAUTO concentration)
- Recommended foundation: [CCNA Security or CCNA Routing & Switching ↗]({file not yet created}) (not required, but knowledge equivalent expected)
- Vendor overview: Cisco Vendor Overview ↗
Concentration exams (choose one to complete CCNP Security)
| Exam Code | Name | Focus | Status |
|---|---|---|---|
| 300-710 | SNCF — Securing Networks with Cisco Firepower | Firewall, IDS/IPS, threat defense | Active |
| 300-715 | SISE — Implementing and Configuring Cisco ISE | Identity, network access control, policy enforcement | Active |
| 300-720 | SESA — Securing Email with Cisco Email Security | Email filtering, malware, data loss prevention | Retiring Aug 26, 2026 |
| 300-725 | SWSA — Securing the Web with Cisco Web Security | Web filtering, SSL inspection, web application firewall | Retiring Aug 26, 2026 |
| 300-730 | SVPN — Securing Networks with Cisco VPN Solutions | VPN design, deployment, troubleshooting | Retiring Aug 26, 2026 |
| 300-735 | SAUTO — Automating and Programming Cisco Security Solutions | Security automation, APIs, infrastructure as code | Active |
Note: Three concentration exams (SESA, SWSA, SVPN) are retiring on August 26, 2026. Candidates should prioritize SNCF, SISE, or SAUTO for new certifications.
Sources
- Cisco 350-701 SCOR Exam Page
- Cisco Learning Network SCOR Exam Topics
- Cisco Exam Blueprint v1.1 PDF
- CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, 2nd Edition (Cisco Press)
- CBT Nuggets CCNP Security SCOR Training
- Glassdoor Network Security Engineer Salary 2026
- PayScale CCNP Security Salary
- Cisco CCNP Security Prerequisites (CBT Nuggets Blog)
- Cisco 300-735 SAUTO Exam Page
Last verified: 2026-05-01 Parent ecosystem: Cisco Ecosystem Parent domain: Security Domain Vendor overview: Cisco Overview