SCOR-350-701 objective 1.2 · domain 1 (20%)
Describe security vulnerabilities and exploits such as software bugs, weak and/or hardcoded passwords, OWASP top ten, missing encryption ciphers, buffer overflow, path traversal, cross-site scripting/forgery, SQL injection, and identification and prioritization using CVEs and CVSS scores
Blueprint v2.0. This is the objective as Cisco publishes it — not a paraphrase.
Lessons covering 1.2
-
Information Security Fundamentals · lesson 1
Security Fundamentals: Threat, Vulnerability, Risk & the CVE/CVSS Engine
-
Information Security Fundamentals · lesson 2
Vulnerability Prioritization: KEV, EPSS, SSVC & BOD 26-04
-
Common Threats · lesson 2
OWASP Top Ten in Practice: SQL Injection & XSS, Live from ATK-KALI-01
-
Common Threats · lesson 3
Vulnerability Classes Beyond the Web: Weak/Hardcoded Passwords, Missing Ciphers, Buffer Overflow, Path Traversal & CSRF
Blueprint version
Version
This page shows SCOR-350-701 v2.0 (first test date 2026-08-27). When a new blueprint version lands, a version selector appears here — the path does not gain a version segment, so this URL keeps working.
Verbatim source: https://learningnetwork.cisco.com/s/scor-v2-exam-topics