Cisco CCNP Security 300-715

Not sure a study set is what you need? Download the free 300-715 demo from Getcertkey and review a sample of the Cisco Implementing and Configuring Cisco Identity Services Engine practice questions before you spend anything — the 2026 edition is ready to try today.

Cisco 300-715 Exam Overview:

Certification Vendor:	Cisco
Exam Name:	Implementing and Configuring Cisco Identity Services Engine
Exam Number:	300-715 SISE
Related Certifications:	Cisco Certified Specialist - Security Identity Management Implementation CCNP Security
Real Exam Qty:	55-65
Available Languages:	English, Japanese
Passing Score:	Variable (approx. 700-850/1000, not publicly disclosed)
Exam Price:	$300 USD
Certificate Validity Period:	3 years
Exam Duration:	90 minutes
Exam Format:	Simulation, Multiple-response, Drag-and-drop, Multiple-choice
Recommended Training:	Implementing and Configuring Cisco Identity Services Engine (SISE)
Exam Registration:	Cisco Official Exam Registration
Sample Questions:
Exam Way:	Online proctored or onsite at authorized testing centers
Pre Condition:	No mandatory prerequisites; recommended: CCNA level knowledge, familiarity with Cisco IOS CLI, 802.1X, and Cisco Secure Client
Official Syllabus URL:	https://www.cisco.com/site/us/en/learn/training-certifications/exams/sise.html

Cisco 300-715 Exam Syllabus Topics:

Cisco Implementing and Configuring Cisco Identity Services Engine Exam FAQ: What Candidates Ask Most

What is the Cisco 300-715 exam?

The 300-715 exam is the official Cisco exam behind the CCNP Security, Cisco Certified Specialist - Security Identity Management Implementation certification, validating the skills measured by the Cisco Implementing and Configuring Cisco Identity Services Engine credential. It sits at the Professional level of the Cisco certification program. It also connects to CCNP Security, Cisco Certified Specialist - Security Identity Management Implementation, so the knowledge you build here carries over to those tracks as well.

How many questions are on the 300-715 exam, and how much time do I get?

The 300-715 exam contains 55-65 questions to be completed within 90 minutes. Before exam day, divide the available time by the question count to work out a comfortable per-question pace, and mark any item that eats into it so you can return later instead of getting stuck. Timed sessions in the Getcertkey test engines make that pacing automatic — run at least two full-length mock exams under the clock so time pressure never becomes the reason you drop points.

What score do I need to pass the 300-715 exam, and what does it cost?

The passing score for the 300-715 exam is Variable (approx. 700-850/1000, not publicly disclosed), and the official registration fee is $300 USD. Retakes are not discounted — every new attempt means paying the full fee again — so it pays to measure yourself before you book. Work through the 325 practice questions on Getcertkey, sit a timed practice test, and schedule your exam only when your scores are consistently comfortable. That simple habit is the cheapest exam strategy there is.

Are there any prerequisites for the 300-715 exam?

No mandatory prerequisites; recommended: CCNA level knowledge, familiarity with Cisco IOS CLI, 802.1X, and Cisco Secure Client Requirements can change when Cisco revises its certification program, so confirm the current eligibility rules on the official exam page before you register.

How do I register for the 300-715 exam?

You can book the Cisco Implementing and Configuring Cisco Identity Services Engine exam through the official registration channels below:

• Cisco Official Exam Registration

As for delivery, the exam is offered in the following format: Online proctored or onsite at authorized testing centers. Choose the option that suits you best when you book your seat.

What official training is recommended for the 300-715 exam?

Cisco recommends the following training resources for the Cisco Implementing and Configuring Cisco Identity Services Engine exam:

• Implementing and Configuring Cisco Identity Services Engine (SISE)

Official courses build the foundation; the 325 practice questions from Getcertkey then show you how that knowledge is examined, so the two work best together.

Can I try the 300-715 practice questions before I buy?

Yes. Getcertkey provides a free 300-715 PDF demo so you can review the question style and answer quality before purchasing. Every purchase also includes 365 days of free updates — if Cisco revises the exam during that period, the updated material reaches you at no cost. Once the free-update year ends, you can extend your update service at a 50% discount.

What if I fail the 300-715 exam, and how is my order delivered?

Every Cisco Implementing and Configuring Cisco Identity Services Engine purchase on Getcertkey is covered by a 100% money-back guarantee with clear conditions: if you take the corresponding exam within 60 days of your purchase and do not pass, you can claim a full refund by submitting a scanned copy of your exam enrollment slip and your official score report as a PDF within two days of the exam date; claims are processed within seven days of submission. The guarantee does not apply to exams taken within three days of purchase, to material that was downloaded but never used in an exam attempt, or to free products and expired orders, and the candidate name must match the payer name. If you would rather not take a refund, you can instead exchange your purchase for two free exam preparation products of equal value and keep the update service on your original product.

Delivery is instant: your download is sent to your email within one minute of payment, with no limit on how many computers you may install the material on. If nothing arrives within two hours, check your spam folder and contact customer service for help.

What topics are covered in the 300-715 exam?

The Cisco Implementing and Configuring Cisco Identity Services Engine exam blueprint is organized into 7 domains. The first three are:

• Endpoint Compliance — 10% of the exam
• Policy Enforcement — 25% of the exam
• Web Auth and Guest Services — 15% of the exam

For the complete domain-by-domain breakdown, scroll up to the full exam topics outline above and use it to plan how you distribute your study time.

Cisco Implementing and Configuring Cisco Identity Services Engine Sample Questions:

Question 1

What is the deployment mode when two Cisco ISE nodes are configured in an environment?

A. standalone
B. distributed
C. active
D. standard

Question 2

Wireless network users authenticate to Cisco ISE using 802.1X through a Cisco Catalyst switch. An engineer must create an updated configuration to assign a security group tag to the user ' s traffic using inline tagging to prevent unauthenticated users from accessing a restricted server. The configurations were performed:
* configured Cisco ISE as a Cisco TrustSec AAA server
* configured the switch as a RADIUS device in Cisco ISE
* configured the wireless LAN controller as a TrustSec device in Cisco ISE
* created a security group tog for the wireless users
* created a certificate authentication profile
# created an identity source sequence
* assigned an appropriate security group tag to the wireless users
* defined security group access control lists to specify an egress policy
* enforced the access control lists on the TrustSec policy matrix in Cisco ISE
* configured TrustSec on the switch
* configured TrustSec on the wireless LAN controller
Which two actions must be taken to complete the configuration? (Choose two.)

A. Create static IP-to-SGT mapping for the restricted web server.
B. Configure Security Group Tag Exchange Protocol to distribute IP to security group tags on Cisco ISE.
C. Configure Security Group Tag Exchange Protocol on the switch.
D. Configure inline tag propagation on the switch and wireless LAN controller.
E. Configure Security Group Tag Exchange Protocol on the wireless LAN controller.

Question 3

An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?
Profiling

A. Guest access
B. Posture
C. Client provisioning

Question 4

A network engineer is configuring Cisco TrustSec and needs to ensure that the Security Group Tag is being transmitted between two devices Where in the Layer 2 frame should this be verified?

A. 802.1Q filed
B. Payload
C. CMD filed
D. 802.1 AE header

Question 5

An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate. What must be done in order to provide the CA this information?

A. Generate the CSR.
B. Download the CA server certificate.
C. Install the Root CA and intermediate CA.
D. Download the intermediate server certificate.

Solutions: