ExtremeCloud IQ Site Engine (XIQ-SE) study guide
ExtremeCloud IQ Site Engine (XIQ-SE) · Work through your exam, one topic at a time.
ExtremeCloud IQ Site Engine (XIQ-SE) is Extreme Networks' on-premises management platform for wired and wireless campus networks, and this exam tests whether you can deploy it and run a real network with it. The credential suits network engineers, administrators, and consultants who already work with Extreme switching, access points, and policy, and who need to prove they can install the server, discover and onboard devices, build sites and topologies, design role-based control policies, integrate the deployment with ExtremeCloud IQ, and keep it healthy through monitoring, alarms, backup, and high availability. The ExtremeCloud IQ Site Engine (XIQ-SE) study guide has 9 sections and about 3,792 words.
01Architecture, Deployment, and Licensing
Domain 1 tests how the ExtremeCloud IQ Site Engine (XIQ-SE) suite is assembled, what each component does, how traffic reaches the server, and which licence unlocks which feature. XIQ-SE is the on-premises management platform (successor to Extreme Management Center).
481 words, about 2 min02Site Engine Installation, Upgrade, and Initial Configuration
Domain 2 covers standing up the server and moving it safely between releases: pre-flight checks, console configuration, the order of first-run tasks, and the supported upgrade path. Confirm virtualisation support and resources (vCPU, RAM, disk for the deployment tier), a second NIC if HA is planned, static addressing, forward and reverse DNS records, NTP reachability and correct time zone.
420 words, about 2 min03Device Discovery, Onboarding, and Inventory Management
Domain 3 tests how devices enter XIQ-SE, stay current, and stay organised: discovery profiles, credential handling, automated onboarding, and the inventory views that answer "what do we have and what firmware is on it?". Under Discover Devices, a profile holds a name, target ranges (start–end, CIDR, subnets, seed devices), SNMP profiles, CLI credentials, device-family filters, site assignment and a schedule (one-time or recurring).
411 words, about 2 min04Network Topology, Maps, and Site Hierarchy
Domain 4 checks that you can model the network the way the interface expects: site hierarchy, floor plans, discovered links, and the placement work that makes maps, heat maps and location reports usable. XIQ-SE organises the world as World Site Building Floor.
410 words, about 2 min05Policy and Role-Based Access Control (Control, Access Control, and Fabric)
Domain 5 carries the biggest conceptual load: Extreme Control's authentication and authorisation pipeline, how roles become network policy, and how fabric services and admin permissions bound what a user or endpoint may do. Order matters: authentication (802.1X/EAP, MAC authentication, web/captive portal) → assessment (health checks) → authorisation rules evaluated top-down with first match winning → role applied → enforcement.
402 words, about 2 min06Wireless Management and ExtremeCloud IQ Integration
Domain 6 covers the wireless side of XIQ-SE - controllers, AP adoption, radio and SSID visibility - and how the on-premises server coexists with ExtremeCloud IQ in the cloud. Controllers are added under Wireless with management credentials: ExtremeCloud IQ Controller (formerly ExtremeCloud Appliance) and WiNG controllers.
422 words, about 2 min07Monitoring, Alarms, Events, and Reporting
Domain 7 tests whether you can turn telemetry into actionable signal: the events-versus-alarms distinction, threshold and trap-based alarm definitions, health dashboards, and scheduled FlexReports. Syslog and SNMP traps arrive as events - a raw, high-volume stream.
395 words, about 2 min08Administration, User Accounts, Backup, and High Availability
Domain 8 is operational hygiene: who can log in and see what, how configuration and data survive a failure, and the conditions an HA pair must satisfy. Local users live under Administration Users and inherit permissions from user groups.
433 words, about 2 min09Troubleshooting, Diagnostics, and Automation
Domain 9 asks you to diagnose why a device is not polled or an endpoint fails authentication, and then automate the fix: the diagnostics toolbox, log locations and the workflow engine. Per-device tools include ping, traceroute, SNMP walk and an SSH/Telnet session launched from the server using stored CLI credentials - the fastest proof of whether routing, credentials or an ACL is at fault.
418 words, about 2 min