Cisco 300-715 SISE
Implementing and Configuring Cisco Identity Services Engine (SISE)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Cisco 300-715 SISE exam is the concentration exam that, combined with a valid CCNP core exam such as ENCOR, leads to the CCNP Security certification. It focuses on implementing and configuring Cisco Identity Services Engine: identity stores and certificate-based authentication, policy sets and authorization results, profiling, web authentication and guest portals, TrustSec segmentation, and the deployment, integration, and troubleshooting work that ties these together. The exam suits network and security engineers who already have routing, switching, and security fundamentals and now need hands-on ISE skills for wired, wireless, VPN, and device-administration use cases. It is not an entry-level exam; expect scenario questions where you must choose the right node, policy layer, or authentication protocol rather than just recall a menu name.
Preparation should be lab-driven. Build a small ISE deployment, integrate it with a switch or wireless controller and an external identity source, then deliberately break things and read the live logs and reports. Study the policy evaluation order, because many questions hinge on which rule matches first. Practice certificate setup, profiling probes, guest flows, and TrustSec enforcement, and review the official exam topics on Cisco's site to confirm the current blueprint. The official body publishes current registration, pricing, scheduling, and retake details on its website; check there for the authoritative figures.
What you'll study
About Cisco 300-715 SISE preparation
What is the exam format?
It is a proctored, computer-based exam delivered at testing centers or online. Cisco's exam topics page lists the current item types, which can include multiple choice, multiple response, drag and drop, and scenario-based items. Confirm the current format and delivery options on Cisco's certification site before you schedule.
How long is the exam and how many questions are there?
Cisco does not guarantee a fixed question count or duration across deliveries, and the figures can change. Rather than rely on a number from a forum, check the exam page on Cisco's site when you register. Plan for a session that requires sustained concentration, and use the review and comment features if offered.
How hard is SISE compared with other CCNP Security exams?
Most candidates find it moderately hard because it is configuration-heavy and tests judgment about policy order and identity flows rather than isolated facts. If you have production ISE exposure, the difficulty drops sharply. Without lab time, memorizing screens is not enough, since scenario items ask why a particular rule or node is the right choice.
What happens if I fail, and how do retakes work?
You can retake a failed exam, but Cisco enforces a waiting period between attempts and charges the exam fee again. The exact waiting period and any limits are set by Cisco and can change, so verify the current retake policy on Cisco's certification site before booking a second attempt.
How long is the certification valid?
Cisco CCNP certifications are valid for three years. You recertify by passing qualifying exams or earning continuing education credits before the expiration date. Check your certification tracker in Cisco's portal, since the qualifying options and credit requirements are updated periodically.
In what order should I study the domains?
Start with deployment and basic integration, because you need a working ISE node and a network device talking to it before anything else makes sense. Then move through identity stores, policy and profiling, web and guest services, and finally TrustSec and device administration. Troubleshooting is best studied throughout, using logs from each lab.
Which topics do candidates most often get wrong?
Common weak spots are policy-set and authorization rule evaluation order, the difference between authentication and authorization results, certificate trust for secure access, and how profiling probes feed endpoint classification. TrustSec enforcement and device-administration flows also trip people who only practiced wired 802.1X.
Do I need the CCNP core exam first?
SISE is a concentration exam. To earn CCNP Security you must also pass a core exam, typically ENCOR, and meet Cisco's other requirements. You can take SISE in any order, but confirm the current certification path on Cisco's site, since core and concentration requirements are revised over time.
What lab setup do I need to prepare?
A small ISE deployment plus a virtual switch or wireless controller, a lightweight directory server, and a certificate authority are enough for most objectives. Practice joining nodes, adding network devices, building policy sets, and reading live logs. Free trials and virtual images from Cisco's site can support this.