CCNP Security SCOR 350-701: Free Study Guides for the v1.1 Blueprint
SCOR 350-701 is the core exam for both CCNP Security and CCIE Security, and it is broad in a way that catches people out: six domains spanning firewalls, VPNs, cloud, email and web security, endpoint, and identity - across a dozen different Cisco products. These guides are written for the v1.1 blueprint and follow Cisco's own domain structure, so you can see where each topic sits and what it is worth.
The six SCOR domains, and where the marks are
Security Concepts is the heaviest domain at a quarter of the exam - and it is mostly describe and compare, not configuration. That is the cheapest 25% on the paper if you study it deliberately instead of assuming you already know it.
| Domain | Weight | Guides here |
|---|---|---|
| 1.0 Security Concepts | 25% | Coming soon |
| 2.0 Network Security | 20% | Coming soon |
| 3.0 Securing the Cloud | 15% | Coming soon |
| 4.0 Content Security | 15% | Coming soon |
| 5.0 Endpoint Protection and Detection | 10% | Coming soon |
| 6.0 Secure Network Access, Visibility and Enforcement | 15% | 802.1X & Cisco ISE |
Weights are Cisco's own, from the published SCOR 350-701 v1.1 exam topics. The exam runs 120 minutes.
Topic guides
More SCOR domain guides are being written. Domain 6.0 came first because it is where the most confusion sits - 802.1X is described everywhere and explained almost nowhere.
No SCOR bank yet - here's the closest real exam
Straight answer: we don't have a 350-701 practice exam yet, and we're not going to pretend otherwise. What we do have is a full CompTIA Security+ SY0-701 exam, and it genuinely overlaps SCOR's two conceptual domains - cryptography, PKI, VPN types, threats, 802.1X and NAC all appear on both. It's the fastest way to find out whether your fundamentals are solid before you spend money on Cisco-specific material. Free, with an explanation on every question and a coach that names your weak concepts.
SECPLUS-EXAM-FULL
Take the free exam
Already have an account? Log in to start · Or read the guides above first.
Three things worth knowing before you start
It is a product exam, not a theory exam
Roughly 60% of SCOR - Network Security, Securing the Cloud, Content Security and Endpoint - is about Cisco implementations: Secure Firewall and FMC, Umbrella, Secure Email and Web Appliance, Secure Endpoint, Secure Network Analytics, pxGrid. Generic security knowledge will not carry you through those domains. If you have never touched the products, lab time or at least the configuration guides matter more than another textbook.
The heaviest domain is the one people skip
Security Concepts is 25%, and because it reads as "the easy bit" it gets skimmed. It is not trivial: it wants you to compare site-to-site and remote-access VPN deployment types including DMVPN and FlexVPN, describe NAT-T for IPsec, explain northbound and southbound APIs, and interpret basic Python that calls a Cisco security API. That last one surprises people.
Domain 6.0 is where CCNP Security starts to feel different
Secure Network Access, Visibility and Enforcement is 15%, and it is the domain that turns "I know what 802.1X is" into "I can predict what this switchport does when the supplicant stays silent." Guest services, profiling, posture, BYOD, MAB, WebAuth and CoA are all named explicitly in the blueprint. If you go on to the 300-715 SISE concentration, this domain is your foundation for it - which is why it's the first guide we wrote.