How many questions are on the CCNP Security exam?

The CCNP Security exam has 100 questions, and the vendor's published description is: Not published by the provider; exam duration is 120 minutes.

How long do you have to complete the CCNP Security exam?

You get 120 minutes, which is about 72 seconds per question. The published format is: Not published by the provider; exam duration is 120 minutes.

What score do you need to pass the CCNP Security exam?

The passing score is 83% (Not published by the provider (Cisco does not publish the cut score in advance; score reports show the passing score per exam)).

What are the domains on the CCNP Security exam?

There are 6 domains: Network Security, Security Concepts, Security Services, Cloud and Content Security, Automation and Programmability, Endpoint Security and Forensics. The official weights are Network Security 20%, Security Concepts 25%, Security Services 15%, Cloud and Content Security 10%, Automation and Programmability 15%, Endpoint Security and Forensics 15%.

How should I use the domain weights when revising?

Weight by percentage, not by domain. 20% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the CCNP Security exam?

Yes: 100 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

CCNP Security Exam Format

350-701

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The CCNP Security certification (implemented via the 350-701 SCOR exam) is a professional-level credential from Cisco that validates advanced skills in core security technologies. It covers network security, cloud security, content security, endpoint protection, secure access, automation, and security operations. Candidates learn to design, deploy, and manage complex security solutions using Cisco's integrated security portfolio, including Firepower NGFW, ISE, Umbrella, AMP, and Stealthwatch. Achieving CCNP Security demonstrates the ability to mitigate emerging threats, enforce zero-trust principles, and automate security workflows. This certification is ideal for network security engineers, security architects, and SOC professionals seeking to advance their careers in cybersecurity. It replaces the older CCNA Security and builds toward the CCIE Security. The exam includes hands-on lab simulations, ensuring practical readiness for real-world security challenges in enterprise and cloud environments.

100 questions

120 min

83% to pass

6 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	100
Time limit	120 minutes (72s per question)
Passing score	83% — Not published by the provider (Cisco does not publish the cut score in advance; score reports show the passing score per exam)
Domains	6
Level	Professional
Question bank here	100 questions
Published format	Not published by the provider; exam duration is 120 minutes
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Network Security	20%	Deploy Cisco Firepower Next-Generation Firewall (NGFW) Configure Cisco ASA firewall features (HA, NAT, ACLs) Implement VPN technologies (site-to-site, remote access, DMVPN, FlexVPN) +2 more	20
Security Concepts	25%	Common security threats and vulnerabilities Cryptography concepts (symmetric, asymmetric, hashing, PKI) Identity and access management (AAA, TACACS+, RADIUS) +3 more	25
Security Services	15%	Cisco Umbrella (DNS security, cloud-delivered firewall) Web security with Cisco WSA (proxy, filtering, DLP) Email security with Cisco ESA (anti-spam, anti-malware, encryption) +2 more	15
Cloud and Content Security	10%	Cloud security architectures (IaaS, PaaS, SaaS) Cisco Secure Workload (Tetration) for micro-segmentation CASB (Cloud Access Security Broker) concepts +2 more	10
Automation and Programmability	15%	REST APIs and RESTCONF / NETCONF for security devices Python scripting for automation of security tasks Cisco DNA Center and SD-Access integration with security +2 more	15
Endpoint Security and Forensics	15%	Cisco AMP for Endpoints (malware protection, file reputation, sandboxing) Endpoint detection and response (EDR) concepts Forensics and investigation techniques +2 more	15

The heaviest domain is Network Security at 20%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Active with a scheduled version update: Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) remains the CCNP Security and CCIE Security core exam, and per Cisco's official CCNP Security pages the last date to test SCOR v1.1 was August 26, 2026 with first date to test v2.0 on August 27, 2026 (v2.0 is now in effect). CCNP Security concentration exams 300-720 SESA, 300-725 SWSA and 300-730 SVPN were retired with last day to test August 27, 2026; current concentrations include 300-710 SNCF, 300-715 SISE, 300-740 SSCA and 300-745 SDSI. The official page lists Prerequisites: None; CCNP Security requires this core exam plus one concentration exam, valid 3 years, renewable by exam or CE credits. Legacy /c/en/us/... SCOR URL redirects to the current /site/us/en/... page. Official exam page