CCNP Security SISE Practice Exams

The 300-715 SISE exam — Implementing and Configuring Cisco Identity Services Engine — is one of the concentration exams that, combined with the 350-701 SCOR core exam, earns the CCNP Security certification. It validates the ability to design, deploy, and operate ISE as the identity and access control platform for a network. The blueprint covers architecture and deployment (10%) — personas, distributed designs, certificates, licensing, and backups; policy enforcement (25%) — policy sets, authentication and authorization, identity stores, EAP methods, authorization profiles, and Change of Authorization; web authentication and guest services (15%) — central and local web auth, guest types, sponsor and self-registration portals; profiler (15%) — probes, profile policies, certainty factors, and the feed service; BYOD (15%) — single and dual SSID onboarding, native supplicant provisioning, and the internal CA; endpoint compliance (10%) — posture conditions, requirements, remediation, and client provisioning; and network access device administration (10%) — TACACS+ device admin policy sets, shell profiles, and command sets. The exam runs 90 minutes.

• 1Completes CCNP Security when paired with the 350-701 SCOR core exam
• 2ISE is the control point for identity-based access in most Cisco enterprise networks, so the skills apply immediately
• 3Covers the full identity stack — 802.1X, guest, BYOD, posture, and device administration — rather than a single feature
• 4Builds the policy-set and Change of Authorization fluency that separates a working deployment from a fragile one
• 5TACACS+ device administration knowledge transfers directly to hardening network infrastructure management

• ✓Design ISE deployments using the PAN, MnT, PSN, and pxGrid personas across standalone and distributed models
• ✓Manage ISE certificates for admin, EAP, portal, and pxGrid usage, including CSRs and Subject Alternative Names
• ✓Apply ISE licensing tiers and plan node capacity, backups, patching, and upgrades
• ✓Build policy sets with authentication and authorization rules, conditions, and results
• ✓Integrate identity stores — internal, Active Directory, LDAP, ODBC, RADIUS token, and SAML — and sequence them
• ✓Choose and troubleshoot EAP methods including EAP-TLS, PEAP, EAP-FAST, TEAP, and EAP chaining
• ✓Configure authorization profiles delivering VLANs, downloadable ACLs, SGTs, and web redirects
• ✓Apply Change of Authorization correctly for reauthentication, port bounce, and session termination
• ✓Deploy guest services with central and local web authentication, hotspot, self-registration, and sponsor portals
• ✓Configure profiling probes, endpoint profile policies, certainty factors, logical profiles, and the feed service
• ✓Implement BYOD onboarding with single and dual SSID flows, native supplicant provisioning, and the ISE internal CA
• ✓Build posture policy with conditions, requirements, remediations, client provisioning, and posture reassessment
• ✓Implement TACACS+ device administration with device admin policy sets, shell profiles, and command sets