CCNP Security

CISCO_SCOR_350_701
ProfessionalVersion 350-701 SCOROfficial exam guide โ†—

Ready to test yourself?

A timed, blueprint-proportional exam drawn fresh from this bank โ€” with a per-domain score report.

๐Ÿ”’ Unlock the simulation โ†’

๐Ÿ”“ Free preview: showing 10 of 200 questions. Unlock the full bank โ€” every question, explanation, and reference.

Unlock all 200 questions โ†’

10 questions across 6 topics. Choose an answer for each question, then check it to see the correct answer and explanation.

Filter by topic

10 questions in Security Concepts

D1_CONCEPTS

Security Concepts

10 questions in topic

Common threats against on-premises, cloud, and application assets; cryptography, hashing, PKI and certificate validation; IPsec, IKEv2 and VPN fundamentals; virtualization and NFV risk; secure device management; and API security including OAuth 2.0 and OIDC.

1
Single choice~60s

Which algorithm is a hashing algorithm rather than an encryption algorithm?

2
Single choice~60s

Which IPsec protocol provides confidentiality in addition to integrity and authentication?

3
Single choice~60s

What does a certificate authority do in a PKI?

4
Single choice~80s

Which statement about the two phases of an IKEv2 negotiation is accurate?

5
Single choice~80s

Which describes the correct relationship between an IKE SA and a Child SA?

6
Single choice~80s

A client validates a server certificate successfully but the connection is still flagged as untrusted. Which cause is MOST likely?

7
Single choice~80s

Which describes the security purpose of a nonce in a cryptographic protocol?

8
Single choice~80s

Which statement about a wildcard certificate is accurate from a risk perspective?

9
Single choice~80s

Which threat does a replay attack represent against an authentication protocol lacking freshness guarantees?

10
Single choice~80s

Which describes the security consequence of a Type 2 hypervisor compared with a Type 1 hypervisor?