OpenExamsFREE PRACTICE — ANY EXAM

Cisco Certified Specialist – Cybersecurity Core — Requirements & Free Practice

US · License preparation

100 free questions · Answer explanations · No signup required

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Loading selected examination banks…

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

Cisco Certified Specialist – Cybersecurity Core

Cisco specialist certification for knowledge of core cybersecurity operations, awarded on passing 350-201 CBRCOR.

Licensing authority: Cisco

Initial by examination
Performing Cybersecurity Using Cisco Security Technologies

Performing Cybersecurity Using Cisco Security Technologies

Time limit
120 minutes
Exam fee
$US400, or use Cisco Learning Credits
Examination outline
  • Fundamentals (20%)
    • Interpret the components within a playbook
    • Determine the tools needed based on a playbook scenario
    • Apply the playbook for a common scenario
    • Infer the industry for various compliance standards
    • Describe the purpose of cyber risk insurance
    • Analyze elements of a risk analysis
    • Apply the incident response workflow
    • Describe characteristics and areas of improvement using common incident response metrics
    • Describe types of cloud environments
    • Compare security operations considerations of cloud platforms
  • Techniques (30%)
    • Recommend AI-powered data analytic techniques
    • Describe the use of hardening machine images for deployment
    • Describe the process of evaluating the security posture of an asset
    • Evaluate the security controls of an environment, diagnose gaps, and recommend improvement
    • Determine resources for industry standards and recommendations for hardening of systems
    • Determine patching recommendations, given a scenario
    • Recommend services to disable, given a scenario
    • Apply segmentation to a network
    • Utilize network controls for network hardening
    • Determine DevSecOps recommendations
    • Describe use of a Threat Intelligence Platform to automate intelligence
    • Apply AI-driven threat intelligence using tools
    • Apply concepts of data loss, leakage, and data states
    • Describe mechanisms to detect and enforce data loss prevention techniques
    • Recommend tuning devices and software across rules, filters, and policies
    • Describe the concepts of security data management
    • Describe use of SIEM tools for security data analytics
    • Recommend procedural and SOAR workflows and automation
    • Apply dashboard data to communicate with stakeholders
    • Analyze anomalous user and entity behavior using SIEM data
    • Determine the next action based on user behavior alerts
    • Describe tools and limitations for network analysis
    • Evaluate artifacts and streams in a packet capture file
    • Troubleshoot existing detection rules
    • Determine tactics, techniques, and procedures from an attack
  • Processes (30%)
    • Analyze components in a threat model
    • Determine steps to investigate common case types
    • Apply the concepts and sequence of steps in the malware analysis process
    • Interpret attack events based on predictive AI analysis of traffic patterns
    • Determine steps to investigate endpoint intrusion
    • Determine known Indicators of Compromise and Indicators of Attack
    • Determine IOCs in a sandbox environment
    • Determine steps to investigate potential data loss
    • Recommend general mitigation steps for vulnerabilities
    • Recommend next steps for vulnerability triage and risk analysis
  • Automation (20%)
    • Compare concepts, platforms, and mechanisms of SOAR
    • Interpret basic scripts such as Python
    • Modify a provided script to automate a security operations task
    • Recognize common data formats
    • Determine opportunities for automation, orchestration, and machine learning within SOAR
    • Determine constraints when consuming APIs
    • Explain common HTTP response codes associated with REST APIs
    • Evaluate parts of an HTTP response
    • Interpret API authentication mechanisms
    • Utilize Bash commands
    • Describe components of a CI/CD pipeline
    • Apply principles of DevOps practices
    • Describe principles of Infrastructure as Code
Examination sources