Free practice test
350-701Free Cisco CCNP Security (SCOR core) practice test
10 original CCNP Security questions, playable right now. No account, no card, no email gate. Every answer opens the full explanation: the concept, why the right option is right, and why each wrong option is wrong, cited to the authoritative documentation behind it.
Sample question 1 of 10
An engineer builds an IPsec SA between a host and a security gateway that forwards traffic for a protected network. Which mode does the architecture require?
Sample question 2 of 10
An engineer permits outbound TCP through an ASA and asks whether a matching rule is needed for the replies. What does the ASA require?
Sample question 3 of 10
An organization needs blocking of a threat first seen minutes ago elsewhere in the world. Which capability delivers that?
Sample question 4 of 10
An engineer picks RADIUS Token as the password-based identity source for the ISE admin portal. What becomes unavailable?
Sample question 5 of 10
An engineer gives a role an identity-based policy allowing S3 writes and a permissions boundary that omits S3. What can the role do?
Sample question 6 of 10
An engineer finds transparently redirected HTTPS requests disappearing at a Secure Web Appliance with nothing in the logs. What is the likely cause?
Sample question 7 of 10
An administrator edits the IKEv2 proposal that an already established ASA tunnel was built from. What does the ASA do to that tunnel?
Sample question 8 of 10
An engineer has valid but often idle connections being closed by idle timeouts on an ASA. Which feature keeps them alive?
Sample question 9 of 10
An organization needs read allowed but write denied on USB storage for one user group. Which capability expresses that?
Sample question 10 of 10
An engineer writes an ISE rule letting a help desk group run show and ping at privilege level 1. Which result carries that level?
Full CCNP Security question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
What this test covers
These 10 questions are drawn across the published exam blueprint rather than from one chapter: this set touches Security Concepts, Network Security, Endpoint Protection and Detection, Secure Network Access, Visibility, and Enforcement, Securing the Cloud, Content Security. Every question is original, written from the official objectives, and verified against a cited vendor page before it serves. None are recalled exam content, which is why the explanations can cite their sources.
A 10-question sample tells you where you stand, not whether you are ready. The full experience is numbered practice exams: 60 questions apportioned to the official domain weightings, sat under the real 120-minute clock and scored against the published cut score.
Keep reading
CCNP Security practice questions
Free sample questions with the full explanation on every answer.
CCNP Security passing score
The exact cut score, what kind of number it is, and the retake terms.
How hard is CCNP Security?
An honest difficulty read from the format, the clock and the weights.