EN简体繁體
Sign in
Home / Cisco / 350-701
Cisco · 350-701

350-701 Exam Practice Questions

Implementing and Operating Cisco Security Core Technologies (CCNP)

350-701 English PDF practice questions: 703 questions in source order, with options supported by the source format, answers and available explanations. Access covers this exam only. One-time payment; no automatic renewal.

Exam overview

For security engineers implementing network and cloud protection, endpoint security, secure access and visibility.

Exam code
350-701
Official exam / credential
Implementing and Operating Cisco Security Core Technologies (CCNP)
Exam format
Technical assessment; consult the official exam topics and booking details for item formats
Exam duration
120 minutes
Official exam languages
English, Japanese

Official exam languages and practice-question file languages are listed separately. Confirm the exam version and available languages when booking with the provider.

Official sources: Provider reference
Information checked: 2026-10-20

Supported languages

  • English
  • Simplified Chinese
Try before you buy

First 20 practice questions

703 total questions

Questions follow the source order. Expand each answer to see its explanation.

Disclaimer: All questions on ExamPico are compiled from internet sources and are provided for study reference only.

Question 11

Question#11Topic1

Which two mechanisms are used to control phishing attacks? (Choose two.)

  1. A. Enable browser alerts for fraudulent websites.
  2. B. Define security group memberships.
  3. C. Revoke expired CRL of the websites.
  4. D. Use antispyware software.
  5. E. Implement email filtering techniques.
Show answer and explanation

Answer

AE

Explanation

Phishing mitigation includes enabling browser alerts for fraudulent websites and implementing email filtering to block malicious messages before they reach users.

Question 12

Question#12Topic1

Which attack is commonly associated with C and C++ programming languages?

  1. A. cross-site scripting
  2. B. water holing
  3. C. DDoS
  4. D. buffer overflow
Show answer and explanation

Answer

D

Explanation

Buffer overflow attacks are closely associated with C and C++ because these languages do not automatically enforce memory bounds on arrays and buffers.

Question 13

Question#13Topic1

Which two prevention techniques are used to mitigate SQL injection attacks? (Choose two.)

  1. A. Check integer, float, or Boolean string parameters to ensure accurate values.
  2. B. Use prepared statements and parameterized queries.
  3. C. Secure the connection between the web and the app tier.
  4. D. Write SQL code instead of using object-relational mapping libraries.
  5. E. Block SQL code execution in the web application database login.
Show answer and explanation

Answer

AB

Explanation

SQL injection prevention relies on parameterized queries/prepared statements and validating integer, float, and Boolean parameters before use in queries.

Question 14

Question#14Topic1

Which two kinds of attacks are prevented by multifactor authentication? (Choose two.)

  1. A. phishing
  2. B. brute force
  3. C. man-in-the-middle
  4. D. DDOS
  5. E. tear drop
Show answer and explanation

Answer

AB

Explanation

Multifactor authentication mitigates phishing and brute-force attacks by requiring additional factors beyond a single password.

Question 15

Question#15Topic1

What are two rootkit types? (Choose two.)

  1. A. registry
  2. B. buffer mode
  3. C. user mode
  4. D. bootloader
  5. E. virtual
Show answer and explanation

Answer

CD

Explanation

Common rootkit types include user-mode rootkits that hook OS APIs and bootloader/kernel rootkits that load before the operating system.

Downloads and personal use

  • Purchase this exam question set separately with 1, 3, 6 or 12 months of download access.
  • After payment confirmation, your library shows the download link and exact expiry time.
  • Download again during your term. Purchase a new term after expiry.
  • PDFs are licensed for personal study only and must not be resold or shared publicly.
  • Files already saved to your device are not remotely deleted when access expires.
How to choose your certification