SISE logo
Focused certification exam prep
Start practice

What Does SISE Mean?

TL;DR
  • SISE means Implementing and Configuring Cisco Identity Services Engine, exam code 300-715, issued by Cisco.
  • Passing earns the Cisco Certified Specialist - Security Identity Management Implementation credential and satisfies the CCNP Security concentration requirement.
  • Policy Enforcement is the heaviest domain at 25%; Web Auth and Guest Services, Profiler, and BYOD each carry 15%.
  • The exam costs USD 300 plus tax, runs 90 minutes, and is closed book through Pearson VUE.

The Short Answer: What SISE Means

On this site, SISE refers to one specific Cisco exam: Implementing and Configuring Cisco Identity Services Engine, exam code 300-715. The letters come from the exam's Cisco-assigned short name, and the exam validates your ability to deploy and operate Cisco Identity Services Engine (ISE), Cisco's policy platform for network access control, guest access, device profiling, posture assessment, and device administration.

If you have searched the acronym elsewhere, you may have noticed that other credentials and organizations use the same four letters. Everything in this article concerns the Cisco 300-715 exam only. For other phrasings of the same question, see our companion pages on what SISE stands for and SISE meaning, or the broader overview of SISE certification.

Quick definition: SISE is the exam; ISE is the product. The exam name describes what you must be able to do with Cisco Identity Services Engine: implement it and configure it, not merely describe it.

Reading the Full Exam Name Word by Word

The official title is a compact job description. Each word signals something about how the exam is written and what it expects of you.

"Implementing and Configuring"

These verbs set the tone. Cisco's professional-level concentration exams are built around hands-on competence, so expect scenario-driven items about what to configure, where, and why a given configuration produces the observed behavior. Memorizing feature lists will not carry you. You need to understand how an authentication request travels from a supplicant through a network access device to ISE, how policy sets evaluate it, and what authorization result comes back.

"Cisco Identity Services Engine"

This is the platform at the center of the exam. ISE acts as a RADIUS and TACACS+ policy server and ties together authentication, authorization, accounting, profiling, guest portals, posture, and BYOD onboarding. The exam assumes you can reason about all of these as parts of one system rather than isolated features.

"SISE" and "300-715"

The 300-series numbering marks a concentration exam in Cisco's professional-tier structure. The short name SISE is what you will see on Cisco's exam pages and in training listings, which is why it became the shorthand across the study community. Our What Is SISE? page covers the same ground from a beginner's angle.

What the Exam Actually Tests: The Seven Domains

Cisco publishes weighted objectives for the exam. The current blueprint is v1.2 (300-715), which the official documents describe as effective August 27, 2026. The seven domains and their weights are listed below, and our complete guide to all seven content areas goes deeper on each one.

DomainWeightWhat it centers on
Architecture and Deployment10%Node roles, personas, deployment design, integration with the network
Policy Enforcement25%Wired and wireless 802.1X, MAB, policy sets, authorization results, CoA
Web Auth and Guest Services15%Central web authentication, guest portals, sponsor flows
Profiler15%Endpoint classification, probes, profiling policies
BYOD15%Device onboarding, certificate provisioning, lifecycle
Endpoint Compliance10%Posture assessment, client provisioning, remediation
Network Access Device Administration10%TACACS+ for device administration, authorization, accounting

Domain 2: Policy Enforcement (25%)

The largest slice of the exam and the best place to invest early study time. This is where ISE's core job lives: deciding who and what gets onto the network, and with what access.

  • Wired 802.1X, including host mode, which the v1.2 refresh explicitly adds
  • MAC Authentication Bypass as a fallback for devices without a supplicant
  • Policy set structure, conditions, and authorization profiles
  • Change of Authorization (CoA) and when ISE uses it to alter a session

Domain 3: Web Auth and Guest Services (15%)

Guest access sits at the intersection of network device configuration and ISE portal design, which makes it a frequent source of troubleshooting-style questions.

  • Central web authentication redirect behavior and why it fails when redirect ACLs are wrong
  • Guest types, sponsor portals, and self-registration flows
  • Portal customization and how it interacts with authorization policy

Domain 4: Profiler (15%)

Profiling classifies endpoints so policy can treat a printer differently from a laptop without anyone typing a MAC address into a list.

  • Which probes collect which attributes, and what trade-offs each carries
  • Profiling policies, conditions, and certainty factors
  • How profiling results feed authorization decisions

Domain 5: BYOD (15%)

Cisco's v1.2 changes update the BYOD lifecycle objectives, so older study notes may be incomplete here.

  • Onboarding flows for personal devices and certificate provisioning
  • Zero-touch provisioning concepts, which were already in the prior blueprint
  • Managing the device lifecycle after onboarding, including revocation

Domain 6 and 7: Compliance and Device Administration (10% each)

These smaller domains still produce real exam items, and Domain 7 contains one of the v1.2 additions.

  • Posture policy, client provisioning, and remediation behavior for noncompliant endpoints
  • TACACS+ command sets, shell profiles, and the explicitly added TACACS+ accounting objective

Cisco notes that related topics may also appear and that the objectives may change, so treat the blueprint as the core of your preparation rather than a hard boundary. Domain 1, Architecture and Deployment, is only 10% but quietly underpins everything else: if you do not understand personas and node roles, questions in the other domains become harder to reason about.

Where 300-715 Fits in Cisco's Certification Structure

Passing 300-715 earns the Cisco Certified Specialist - Security Identity Management Implementation certification. It also satisfies the concentration-exam requirement for CCNP Security. Full CCNP Security additionally requires the core exam 350-701 SCOR, so SISE is one half of that professional-level pairing, not the whole thing.

Cisco lists no formal prerequisite qualifications and no mandatory training course for this exam. Cisco's training overview does recommend familiarity with the Cisco IOS CLI for wired and wireless devices, Cisco Secure Client, Microsoft Windows, and 802.1X, but those are recommended preparation and not entry gates. Our SISE requirements guide walks through eligibility in more detail.

Order is flexible: Because the Specialist credential stands on its own, some candidates take 300-715 first to gain a credential quickly and then add 350-701 later. Remember that the window for combining CCNP exam passes is a separate clock from certification renewal, so plan both deliberately.

Exam Mechanics: Fee, Format, Rules, and Retakes

Knowing what the acronym means is only useful if you also know what sitting the exam involves. Here are the verified mechanics.

  • Fee: USD 300 plus tax. Cisco Learning Credits are accepted. See the SISE certification cost breakdown for budgeting beyond the exam fee itself.
  • Duration: 90 minutes, proctored and computer-delivered.
  • Delivery: Pearson VUE test centers or eligible OnVUE online appointments.
  • Closed book: Cisco's Candidate Rules Agreement excludes personal books and notes, and current policies require you to accept the confidentiality agreement.
  • Retakes: After a failed attempt, you wait five calendar days, beginning the following day, before retaking the same exam.
  • Language: The individual SISE exam page lists English, while the CCNP Security catalog also lists Japanese. Verify what is offered for the specific booking you make.

Question style and scoring

Cisco's general guidance for Associate and Professional exams discusses multiple-choice items, drag-and-drop items, and possible performance-based lab items. That guidance does not guarantee a particular mix for every SISE delivery, and no fixed question count was verified. Prepare for all three styles rather than betting on one.

Cisco also does not publish a fixed numeric passing score; standards are set statistically and can change. If you see a specific cut score quoted online, treat it skeptically. Our passing score article and pass rate analysis explain what can and cannot be known. Scheduling specifics are covered in SISE exam dates and scheduling.

Key Takeaway

Because no official pass rate or fixed question count exists, judge readiness by blueprint coverage and hands-on confidence, not by chasing a rumored number. Use timed practice from the SISE practice tests to build pacing for the 90-minute window.

v1.2 Versus Software Versions: A Common Confusion

Candidates often conflate the exam blueprint version with the ISE software release. They are different things. The exam is labeled v1.2; Cisco's training, updated August 27, 2026, covers ISE 3.4 and 3.5. The software versions do not replace the v1.2 blueprint label, so always anchor your study to the published objectives, not to a release number.

Compared with v1.1, the refresh makes these notable changes:

  • Adds host mode to wired 802.1X objectives
  • Updates the BYOD lifecycle and posture objectives
  • Explicitly adds TACACS+ accounting
  • Keeps zero-touch provisioning and CoA, which were already present

The practical consequence: study materials written for v1.1 are mostly still relevant but may leave gaps in exactly these areas. Check any older notes against the current blueprint.

Who Pursues This Exam and Who Hires for the Skills

The exam's content points to a clear audience: people who design, deploy, and run network access control. Typical roles include network security engineers, network engineers who own wired and wireless access policy, security architects, and operations staff responsible for guest and BYOD programs. Consultants and integrators who deploy ISE for customers also have an obvious reason to hold it, since it demonstrates product-specific competence.

Organizations that hire for these skills tend to be those with large, diverse endpoint populations: enterprises, healthcare systems, universities, government bodies, and managed security providers. In each, the day-to-day work maps closely to the domains above: segmenting access by identity, onboarding unmanaged devices, supporting guests, and administering network devices through TACACS+. For a look at the job market side, see our pages on SISE jobs and the SISE salary guide, and for a value judgment, whether the certification is worth it.

Sequencing Your Preparation Around the Blueprint

Generic study advice matters less here than ordering the domains sensibly. Because ISE concepts build on one another, a dependency-aware sequence works better than reading the blueprint top to bottom.

Phase 1

Foundations and Policy Enforcement

  • Start with Architecture and Deployment so personas and node roles are second nature
  • Move straight into Policy Enforcement (25%): 802.1X, MAB, host modes, policy sets, CoA
Phase 2

Identity Sources and Endpoint Context

  • Profiler next, since profiling feeds authorization conditions
  • Web Auth and Guest Services, paying close attention to redirect and ACL behavior
Phase 3

Lifecycle, Compliance, and Administration

  • BYOD and Endpoint Compliance, which share client provisioning concepts
  • Network Access Device Administration, including TACACS+ authorization and accounting
Phase 4

Integration and Timed Practice

  • Work through cross-domain scenarios, then take timed sets from the practice test platform
  • Review your weakest weighted domain first

For a fuller plan, including resource suggestions, read our SISE study guide, and for a realistic view of effort, how hard the SISE exam is. When you want a compact refresher before exam day, the SISE cheat sheet condenses the must-know facts. If you are weighing formal courses, the official training prepares for v1.2 and carries 32 CE credits; see also our overview of SISE training.

Validity and Renewal

The Specialist certification is valid for three years. Renewing through continuing education requires 40 credits before expiry. The official 32-credit course alone is therefore not enough to renew the Specialist by CE. Separately, CCNP renewal requires 80 CE credits, and qualifying concentration exam passes earn 40 CE while core exam passes earn 80.

Two clocks, not one: The three-year window for combining CCNP exam passes is distinct from certification renewal. Renewing by CE does not extend the exam-completion window, so track both dates if you are working toward full CCNP Security.

Frequently Asked Questions

What does SISE mean in the context of this site?

It refers to Cisco's Implementing and Configuring Cisco Identity Services Engine exam, code 300-715. It validates skills in deploying and operating Cisco ISE for access control, guest services, profiling, BYOD, posture, and device administration.

What credential do I earn by passing SISE?

You earn the Cisco Certified Specialist - Security Identity Management Implementation certification, and the pass satisfies the CCNP Security concentration requirement. Full CCNP Security also requires passing the 350-701 SCOR core exam.

Which domain carries the most weight?

Policy Enforcement is the largest at 25%. Web Auth and Guest Services, Profiler, and BYOD each carry 15%, while Architecture and Deployment, Endpoint Compliance, and Network Access Device Administration each carry 10%.

How much does the exam cost and how long is it?

The fee is USD 300 plus tax, and Cisco Learning Credits are accepted. The proctored exam lasts 90 minutes and is delivered through Pearson VUE test centers or eligible OnVUE online appointments.

Are there prerequisites or a required course?

No. Cisco lists no formal prerequisites or mandatory training. Familiarity with Cisco IOS CLI, Cisco Secure Client, Microsoft Windows, and 802.1X is recommended preparation only.

How soon can I retake the exam if I fail?

You must wait five calendar days, beginning the following day, before retaking the same exam. Cisco does not publish a fixed numeric passing score, so use blueprint coverage to judge readiness before rebooking.

In short, SISE is shorthand for a focused, hands-on Cisco exam about one product and the access-control problems it solves. Start from the seven weighted domains, respect the v1.2 changes, and let that structure drive your preparation. When you are ready to test yourself, head to the SISE Exam Prep practice tests to see where you stand.

Ready to pass your SISE exam?

Put this into practice with free SISE questions across every exam domain.