Cisco CCNP Security · SCOR + SNCF · SCOR 350-701 v2.0 · 6.5–6.8 Visibility and Enforcement

Visibility and enforcement: Duo zero trust, exfiltration, Cisco XDR and Splunk

Zero-trust identity with Duo (MFA, device health, Adaptive Access, Trust Monitor, SSO), how data leaves a network (DNS tunnelling, HTTPS, ICMP, cloud storage and more), and how Cisco XDR and Splunk SIEM/SOAR turn scattered telemetry into one detected, investigated and contained incident — hands-on with real SPL.

57 min read10 chapters4 labs15 quiz7 scenarios15 interview Q&A

This module is part of the paid plans

The free Starter plan opens the first module of every path. Upgrade to unlock this module's lesson, labs, quiz and scenarios.

Your free Starter plan includes

  • ✓First module of every path — lessons and quizzes
  • ✓3 hands-on labs in total
  • ✓Practice questions (up to 10 per set)
  • ✓Build your own lab — 3 sessions a month, up to 4 devices
Start freeLog in

Inside this module

  • Lab · Duo: protect an app with MFA and a device-health policy
  • NOC · Splunk: hunt DNS-tunnelling exfiltration and contain the host
  • NOC · Cisco XDR: investigate an incident and contain it in one click
  • Lab · Ticket: a new hire is locked out after a Duo policy change
🎓 For educational purposes only — all devices are simulationsTerms of UsePrivacy Policy© 2026 Network Kings
CONFIG by Network Kings — an educational IT simulation platform for learning purposes only. It is not Cisco IOS, Junos, FortiOS or PAN-OS and contains no Cisco, Juniper, Fortinet or Palo Alto Networks software. Cisco, IOS, CCNA, CCNP, Juniper, JNCIA, JNCIS, JNCIP, Fortinet, FortiGate, FortiOS, NSE, Palo Alto Networks, PAN-OS and PCNSE are trademarks of their respective owners. Network Kings is not affiliated with or endorsed by Cisco Systems, Inc., Juniper Networks, Inc., Fortinet, Inc. or Palo Alto Networks, Inc.