Cisco 300-715 SISE study guide
Cisco 300-715 SISE · Work through your exam, one topic at a time.
The Cisco 300-715 SISE exam is the concentration exam that, combined with a valid CCNP core exam such as ENCOR, leads to the CCNP Security certification. It focuses on implementing and configuring Cisco Identity Services Engine: identity stores and certificate-based authentication, policy sets and authorization results, profiling, web authentication and guest portals, TrustSec segmentation, and the deployment, integration, and troubleshooting work that ties these together. The Cisco 300-715 SISE study guide has 5 sections and about 2,264 words.
01Identity Management and Secure Access
This domain tests how ISE establishes identity before policy is evaluated: authentication protocols, internal and external identity stores, identity source sequences, certificate-based authentication, MFA, and guest/sponsor identities. Questions often ask which store is consulted next or why a valid account is rejected after a store failure.
507 words, about 3 min02Policy Enforcement and Profiling
This domain tests the decision path after identity: policy sets, authentication and authorization rules, authorization profiles, profiling, posture, client provisioning, and BYOD. The exam expects you to predict which rule fires and what happens when an endpoint's profile or posture changes.
426 words, about 2 min03Web Authentication and Guest Services
This domain tests how unauthenticated endpoints are redirected, how guests obtain accounts, and how sponsor approval and guest portals fit into authorization. Expect questions on central web authentication (CWA), guest portal types, guest types, sponsor groups, AUP, and device registration.
428 words, about 2 min04Cisco TrustSec and Network Device Administration
This domain tests two policy-control areas: TrustSec segmentation with SGT/SGACL/SXP, and TACACS+ device administration with shell profiles and command sets. The exam expects you to know where policy is defined in ISE and where it is enforced on the network device.
465 words, about 2 min05Deployment, Integration, and Troubleshooting
This domain tests the ISE deployment itself: node personas, distributed and HA design, certificates, external integration, backup/upgrade, monitoring, and troubleshooting tools. Questions often ask which node performs a role or which tool proves why a session failed.
438 words, about 2 min