Independent training guide · sources checked October 12, 2026

CCNP Security: training and costs

Choose SCOR and a current concentration. Compare preparation, measured skills, training formats, total-cost unknowns and related work before committing time or money.

SCOR v2.0 + one concentrationUSD 700 exam-fee floorNo formal exam prerequisite

See exam and training costs · Compare preparation options

Research and detailed planning are optional. A short request asks for your need, name, email and permission to reply.

Who it fits

Choose core and concentration together

CCNP Security is Cisco’s professional credential for security implementation. Choose it around the environment and work you need to learn, then select a concentration that addresses a specific gap.

For investigation and security-operations work, compare CCNP Cybersecurity. For campus networking, compare CCNP Enterprise. If basic network behavior is unfamiliar, start with networking foundations. These are optional comparisons, not a required credential ladder.

A work-focused course can be useful without pursuing the whole certification. If an employer requires the award, confirm the exact credential, deadline and acceptable evidence of completion before choosing training.

Compare all eight CCNP tracks · Decide whether CCNP fits your situation.

Requirements & experience

Formal entry: Cisco lists no prerequisite for the core or concentration exams. A prior CCNA is not required; open registration does not establish beginner readiness.

Recommended preparation: the SCOR course has no formal prerequisites but recommends Ethernet/TCP-IP familiarity, Windows and Cisco IOS working knowledge, and basic network-security concepts. It does not impose a universal employment duration.

Learnerside starting check: explain a packet’s path, distinguish authentication from authorization, and investigate a synthetic policy failure. If those need guided practice, compare foundation learning and feedback before compressed exam review. For teams, assess each learner’s baseline rather than assuming equal starting knowledge.

Exams & specializations

Earn the full credential with 350-701 SCOR plus one concentration. Passing one exam earns a Specialist certification; core alone is not the complete CCNP. Cisco lists 120 minutes for core and 90 for each concentration.

These four choices are listed on the current credential overview, checked October 12, 2026. SSCA was formerly called SCAZT. An older course listing does not establish a current concentration; earlier recorded retirement notices differed on one cutoff date, which this guide does not resolve.

Already passed part of the path? Cisco’s transition FAQ says an eligible SCOR v1.1 pass can still combine with a concentration after the revision change, and an earlier concentration can combine with core. The other exam must be passed within three years of the first pass. Check your account before buying a repeat attempt. Continuing Education does not extend that exam-combination window.

Skills measured

The SCOR v2.0 objectives publish these core-only weights. Concentration preparation is separate. These original practice prompts are not exam questions, a complete syllabus or evidence of performed work.

Security Concepts · 20%

Explain two control choices for a fictional environment and the risk each leaves unresolved.

Objective family 1.0 · p1

Network Security · 25%

Trace a synthetic blocked flow and propose a bounded policy correction with a recovery check.

Objective family 2.0 · pp1–2

Cloud Security · 15%

Assign responsibilities for a fictional cloud workload and explain a missing control.

Objective family 3.0 · p2

Secure Service Edge · 10%

Compare access and inspection choices for an invented remote user and private application.

Objective family 4.0 · p2

Endpoint Protection and Detection · 15%

Interpret a synthetic endpoint alert and state what evidence you would need before containment.

Objective family 5.0 · p3

Network Access, Visibility, and Enforcement · 15%

Diagnose an invented access-policy failure and explain how to validate the intended decision.

Objective family 6.0 · p3

Version check: the objectives and official SCOR course identify v2.0. Cisco’s transition FAQ describes a substantial change from v1.1; ask a seller to map both core and chosen concentration materials to the current objectives. Product names or an unchanged exam number do not establish coverage.

Documenting an assumption, communicating a risk, reviewing a change and planning recovery are complementary work skills. They are Learnerside suggestions, not extra weighted domains or certification outcomes. Use synthetic configurations and logs for an original work sample.

Costs

USD 700 is the first-attempt exam-fee floor: USD 400 for SCOR plus USD 300 for one concentration, observed October 12, 2026 on the official overview. This assumes you need both passes; check an existing eligible pass before budgeting a repeat.

  • Booking: confirm region, currency, taxes and voucher conditions.
  • Training: tuition, licensed labs, books, feedback and access expiry are separate or unknown.
  • Retakes: require written inclusion and eligibility terms; an extra attempt is not assumed free.
  • Time and renewal: include study time, time away from work, travel if relevant, and the chosen upkeep route separately.

This is not a universal three-year ownership budget. Cisco says Learning Credits may be usable; confirm your own eligibility and payable amount. For employer approval, list confirmed amounts, estimates and unknowns separately.

Cisco exam policies · Employer support and funding.

Training options

Official course evidence · checked 2026-10-15 UTC

Course outline, practice and provider options

Implementing and Operating Cisco Security Core Technologies

SCOR · 350-701 core · Published issuer outline

The certification skills above describe assessment. This outline describes teaching; ask the seller which revision, exercises and support you receive.

Published course modules (27 topics)
  1. Threat intelligence and analysis
  2. Exploits, vulnerabilities and AI risk
  3. Phishing and identity attacks
  4. Cryptography fundamentals
  5. Layer 2 protections
  6. Zero Trust and SAFE design
  7. Administrative hardening
  8. Device access and AAA diagnosis
  9. Threat Defense installation
  10. Firewall policy controls
  11. Site VPNs
  12. Remote-user VPNs
  13. Cloud protection frameworks
  14. Workload security and eBPF
  15. Automated secure development
  16. Duo identity controls
  17. SASE/SSE design
  18. Private application access
  19. Internet access controls
  20. Identity/access principles
  21. ISE admission and change of authorization
  22. Email threat protection
  23. Endpoint compliance and trust
  24. Endpoint detection and malware analysis
  25. Splunk analytics
  26. Orchestrated SOC response
  27. XDR correlation

Recommended course background: Cisco recommends Ethernet/TCP-IP, Windows, IOS and network-security knowledge. Course recommendations are separate from certification eligibility.

Published practice and lab work
  • Harden devices and diagnose administrative AAA.
  • Practise firewall/VPN policies and ISE access decisions.
  • Investigate endpoint/email evidence, Splunk and XDR workflows.

Edition and access: Core teaching is separate from concentration preparation. ONLC, New Horizons and Learning Tree retain older exam or syllabus wording; require a written mapping to current SCOR v2.0 and confirmation of CE credit eligibility.

Official concentration-course references

Choose the concentration around your work, then read its own syllabus and recommended background. Course names can differ from current exam names; a reference is not an included package or confirmed delivery.

  • SFWIPF: Firewall fundamentals; part of the retained SNCF preparation sequence.
  • SFWIPA: Advanced firewall preparation; not an assumed replacement by the announced consolidated course.
  • SISE: Identity services and access-control practice.
  • SDSI: Security architecture/design scope.

Start with the issuer’s Cisco U. path and published course formats. For partner instruction, Cisco’s Americas directory lists NetCom Learning, New Horizons Computer Learning Centers Inc., Fast Lane and the legacy name Skillsoft Global Knowledge. Match your seller, region, delivering organization and exact course before buying.

For the same official course and revision, compare instructor access, personally operated labs, feedback, timetable, recordings, access expiry and total cost. A shared syllabus does not make packages interchangeable. Use Cisco’s learning locator.

Learning Tree

Online/in-person reference retains older product and CE wording; current delivery mapping and authorized entity need confirmation.

Check the exact course reference

Dated instruction prices

These prices describe named packages at the recorded dates. Confirm the checkout total, teaching format, lab license, feedback, vouchers and cancellation terms. A calendar is not a confirmed seat. A core course does not include a CCNP concentration automatically.

2 dated options shown. Prices are in USD; check the date and package before using one in a budget.

Live instructor-led courses

Fast Lane

CCNP Security

$4,300 per course

SCOR: Implementing and Operating Cisco Security Core Technologies — online training

Delivery
virtual live
Exam
Inclusion to confirm
Buyer
Commercial
Observed

Five-day US live-online training; provider lists no online dates at this reading. SCOR prepares for the core exam only; the full CCNP Security award also requires a concentration exam. Course body identifies SCOR v2.0; confirm the delivered edition. Sidebar and body disagree on Continuing Education credits, so confirm the eligible amount. Actual session, time zone, contact hours, instructor feedback, licensed lab/recording access, seat, exam voucher, tax and cancellation terms need confirmation. Classroom tuition is a separate format; no self-paced price is inferred.

Check this offer on Fast Lane ↗

ONLC Training Centers

CCNP Security

$4,295 per course

SCOR v2.0: Implementing and Operating Cisco Security Core Technologies

Delivery
instructor led
Exam
Inclusion to confirm
Buyer
Commercial
Observed

Five-day live remote instructor-led course; USD tuition supported by the provider course and linked catalogue. SCOR prepares for the core exam only; the full CCNP Security award also requires a concentration exam. Heading says course v2.0 but the body describes exam v1.0 and older topics; confirm written alignment with the current 350-701 SCOR v2.0 objectives before purchase. Exact session, time zone, contact hours, seat, lab/recording access, exam voucher, tax, cancellation/transfer terms and regional enrollment restrictions need confirmation.

Check this offer on ONLC Training Centers ↗

Browse all dated training prices. Compare the exact course and complete package rather than treating a format price gap as like-for-like savings.

Free scope review and internal learning

Read the objectives, identify two core and two concentration gaps, and compare approved internal learning. Public scope and community discussions do not establish a complete free course, exam readiness or licensed lab entitlement.

Read SCOR v2.0 objectives · Cisco Learning Network

Cisco U. self-paced preparation

The SCOR course links a learning path. Confirm current content, practice access, feedback, subscription or purchase terms and access expiry. Core preparation does not automatically include your concentration.

Official SCOR course and formats · Cisco U.

Instructor-led or team training

Compare guided troubleshooting and design feedback when these address your gap. Require the exact delivered outline, learner-operated lab time, dates, daily hours, time zone, instructor access and cancellation terms.

Find Cisco training listings

Firewall training transition: the SNCF exam page still recommends SFWIPF followed by SFWIPA. The August 27 issuer FAQ announces a consolidated SNCF course for late 2026. That announcement does not verify its availability today. Ask which exact package and revision you are buying; do not assume one advertised course covers both outlines.

No selected provider, current tuition, bookable seat, voucher inclusion or delivery relationship is verified here. Use the Cisco authorization checklist to check the actual seller and delivery organization. Authorization does not establish identical packages or a seat.

For a team, specify the environment, work outcome, learner baseline, chosen concentration, deadline and required practice. Team learning decisions.

Jobs & salary context

Security engineering and analysis

Compare firewall, identity and network-security engineering duties: review access policy, investigate an alert, validate a control and explain an operational risk. Titles and product requirements vary by employer.

Broad U.S. context: Information Security Analysts, SOC 15-1212, May 2025 median annual wage USD 129,180.

Network administration with security duties

Compare network administrator and infrastructure-support duties involving access, device hardening, maintenance and recovery. Check the actual platform and responsibilities before choosing a concentration.

Broad U.S. context: Network and Computer Systems Administrators, SOC 15-1244, May 2025 median annual wage USD 99,130.

Occupation wages checked October 12, 2026. They are not CCNP Security-holder salaries, starting offers or a credential-caused pay increase. Security design or architecture jobs may require wider experience than this course or exam demonstrates; neither occupation number describes every title above.

Build an original synthetic work sample: state a requirement, propose a policy or design, show your reasoning and validate a recovery plan. Label proposed work separately from responsibilities you actually performed. Certification does not guarantee a job or seniority.

Renewal

Cisco lists three-year validity, with renewal through qualifying exams or Continuing Education before expiry. Check the recertification policy and your account for the applicable route. Your deadline, credit eligibility and renewal cost are unknown here; renewal is not assumed to be free.

Renewing an existing certification and extending a partially completed exam combination are different questions. Cisco’s transition FAQ says CE credits do not extend the three-year core-to-concentration window. A revision change alone does not require a fresh core pass.

Sources & next steps

Current observations checked October 12, 2026: credential, combination, fees and validity; core exam; four concentration pages above; SCOR v2.0 objectives, pages 1–3; course preparation and formats; August 27 transition FAQ; and the two linked BLS occupation pages. Announced training is separate from a verified offer.

All Cisco guides · Compare CCNP Cybersecurity · All vendors.

Research, the private brief and the short request are independent options. Permission to reply is separate from later consent naming any provider who would receive your details.

Optional: reflect on core security concepts

These earlier recorded questions sample core concepts only. They do not cover a concentration, predict a pass or demonstrate performed security work; original evidence dates remain attached.

Readiness check · ~2 min · no score · no email

Not sure if CCNP Security is the right next step for you?

Answer a few quick questions and we’ll map your background against the exam’s published domains and the vendor’s recommended prep — a study order and a sequencing read, not a score or a pass prediction. Everything you need to decide is already above; open this only if you want a personalized plan.

  • Network Security25%
  • Security Concepts20%
  • Cloud Security15%
  • Endpoint Protection and Detection15%
  • Network Access, Visibility, and Enforcement15%
  • Secure Service Edge10%
Earlier supporting references

These earlier records retain their observation dates and may name retired exams or historical acronyms. They do not define today’s concentration choices or reverify a training offer.