EN简体繁體
Sign in
Home / Cisco / 350-701
Cisco · 350-701

350-701 Exam Practice Questions

Implementing and Operating Cisco Security Core Technologies (CCNP)

350-701 English PDF practice questions: 703 questions in source order, with options supported by the source format, answers and available explanations. Access covers this exam only. One-time payment; no automatic renewal.

Exam overview

For security engineers implementing network and cloud protection, endpoint security, secure access and visibility.

Exam code
350-701
Official exam / credential
Implementing and Operating Cisco Security Core Technologies (CCNP)
Exam format
Technical assessment; consult the official exam topics and booking details for item formats
Exam duration
120 minutes
Official exam languages
English, Japanese

Official exam languages and practice-question file languages are listed separately. Confirm the exam version and available languages when booking with the provider.

Official sources: Provider reference
Information checked: 2026-10-20

Supported languages

  • English
  • Simplified Chinese
Try before you buy

First 20 practice questions

703 total questions

Questions follow the source order. Expand each answer to see its explanation.

Disclaimer: All questions on ExamPico are compiled from internet sources and are provided for study reference only.

Question 16

Question#16Topic1

How is DNS tunneling used to exfiltrate data out of a corporate network?

  1. A. It leverages the DNS server by permitting recursive lookups to spread the attack to other DNS servers
  2. B. It encodes the payload with random characters that are broken into short strings and the DNS server rebuilds the exfiltrated data
  3. C. It redirects DNS requests to a malicious server used to steal user credentials, which allows further damage and theft on the network
  4. D. It corrupts DNS servers by replacing the actual IP address with a rogue address to collect information or start other attacks
Show answer and explanation

Answer

B

Explanation

DNS tunneling encodes exfiltrated data into DNS queries/responses, often as short encoded strings that a malicious authoritative server reassembles.

Question 17

Question#17Topic1

Which type of attack is social engineering?

  1. A. trojan
  2. B. MITM
  3. C. phishing
  4. D. malware
Show answer and explanation

Answer

C

Explanation

Phishing is a form of social engineering that manipulates users into revealing credentials or performing unsafe actions.

Question 18

Question#18Topic1

What are two DDoS attack categories? (Choose two.)

  1. A. protocol
  2. B. source-based
  3. C. database
  4. D. sequential
  5. E. volume-based
Show answer and explanation

Answer

AE

Explanation

DDoS attacks are commonly categorized as volume-based floods and protocol-based attacks that exploit weaknesses in network protocols.

Question 19

Question#19Topic1

In which type of attack does the attacker insert their machine between two hosts that are communicating with each other?

  1. A. man-in-the-middle
  2. B. LDAP injection
  3. C. insecure API
  4. D. cross-site scripting
Show answer and explanation

Answer

A

Explanation

A man-in-the-middle attack places the attacker between two communicating hosts to intercept or alter traffic.

Question 20

Question#20Topic1

How does Cisco Advanced Phishing Protection protect users?

  1. A. It utilizes sensors that send messages securely.
  2. B. It uses machine learning and real-time behavior analytics.
  3. C. It validates the sender by using DKIM.
  4. D. It determines which identities are perceived by the sender.
Show answer and explanation

Answer

B

Explanation

Cisco Advanced Phishing Protection uses machine learning and real-time behavioral analytics to detect identity deception and phishing threats.

Downloads and personal use

  • Purchase this exam question set separately with 1, 3, 6 or 12 months of download access.
  • After payment confirmation, your library shows the download link and exact expiry time.
  • Download again during your term. Purchase a new term after expiry.
  • PDFs are licensed for personal study only and must not be resold or shared publicly.
  • Files already saved to your device are not remotely deleted when access expires.
How to choose your certification