What Is SISE Certification?

What the SISE Credential Actually Is

In the Cisco ecosystem, SISE refers to one specific exam: Implementing and Configuring Cisco Identity Services Engine, exam code 300-715. It validates that you can deploy and operate Cisco Identity Services Engine (ISE), the policy platform that decides who and what gets onto a network, under which conditions, and with what level of access. If you have seen the acronym attached to other credentials elsewhere, set that aside: this article, and everything on this site, concerns only the Cisco 300-715 exam. For shorter explainers on the terminology, see What Does SISE Stand For? and SISE Meaning.

ISE sits at the center of network access control. It authenticates users and devices with 802.1X and MAB, classifies endpoints through profiling, issues authorization results such as VLANs, downloadable ACLs and security group tags, runs guest portals, onboards personal devices, checks endpoint posture, and acts as a TACACS+ server for administrators logging into network gear. The 300-715 exam tests whether you can actually build and troubleshoot those workflows, not merely define them.

What Passing Earns You

Passing 300-715 gives you two things at once:

• Cisco Certified Specialist - Security Identity Management Implementation, a standalone credential you can list on a resume as soon as you pass.
• Satisfaction of the CCNP Security concentration requirement. CCNP Security is built from a core exam plus one concentration exam. Full CCNP Security also requires the core exam, 350-701 SCOR, so passing SISE alone does not make you a CCNP.

That dual role is why many candidates treat SISE as their first concentration choice: it produces a visible specialist badge immediately and moves them halfway to a professional-level certification. For a deeper look at what the credential is worth professionally, read Is the SISE Certification Worth It? Complete ROI Analysis 2026.

Exam Mechanics: Fee, Format and Booking

Cost and delivery

The exam fee is USD 300 plus tax, and Cisco Learning Credits are accepted as payment. The exam is a proctored, computer-delivered written test lasting 90 minutes. You can take it at a Pearson VUE test center or through an eligible OnVUE online appointment. For the full cost picture, including retakes and training, see SISE Certification Cost 2026: Complete Pricing Breakdown.

Rules of the room

• The exam is closed book. The Cisco Candidate Rules Agreement (v1.0, June 2019) excludes personal books and notes.
• Current Cisco policies require you to accept a confidentiality agreement before testing.
• If you fail, you must wait five calendar days, beginning the following day, before retaking the same exam.

Format and scoring: what is and is not known

Cisco's general guidance for Associate and Professional exams discusses multiple-choice items, drag-and-drop items and the possibility of performance-based lab items. It does not guarantee a particular mix for every SISE delivery, so prepare for all of those styles rather than betting on one. Cisco also does not publish a fixed question count, and no official pass rate has been verified. Passing standards are determined statistically and can change, and Cisco does not publish a fixed numeric passing score. That is why you will see honest caution in resources like SISE Passing Score 2026: Exactly What You Need to Pass and SISE Pass Rate 2026: What the Data Shows: any site quoting a precise cut score or pass percentage as official fact is not drawing on a Cisco-published figure.

No gatekeeping, but real expectations

There are no formal prerequisite qualifications and no mandatory training courses. Cisco's official course recommends familiarity with Cisco IOS CLI for wired and wireless devices, Cisco Secure Client, Microsoft Windows and 802.1X, but that is preparation advice, not an eligibility rule. The details are covered in SISE Requirements 2026: Eligibility, Prerequisites & How to Qualify, and scheduling considerations are in SISE Exam Dates 2026: Testing Windows, Deadlines & Scheduling.

The v1.2 Blueprint and Its Seven Domains

The exam is built from official weighted objectives in the Implementing and Configuring Cisco Identity Services Engine v1.2 (300-715) blueprint, effective August 27, 2026. Cisco also cautions that related topics may appear and that objectives may change, so treat the blueprint as a floor, not a ceiling.

Notice the shape: Policy Enforcement alone is worth a quarter of the exam, and three more domains at 15% each bring the top four to 70% of the total. A candidate who is only strong on deployment and TACACS+ will struggle. A full domain-by-domain breakdown lives in SISE Exam Domains 2026: Complete Guide to All 7 Content Areas.

What Changed in the Refresh

If you studied from older material, the v1.2 update matters. Compared with v1.1, the refresh adds host mode to wired 802.1X, updates the BYOD lifecycle and posture objectives, and explicitly adds TACACS+ accounting. Zero-touch provisioning and CoA were already present in the earlier version. Cisco's training for the exam covers ISE 3.4 and 3.5, but software versions do not replace the v1.2 blueprint label: the blueprint, not the release number, defines what is testable.

Concrete Topics You Must Be Able to Configure

The domains above are the scoring structure; this is what the work actually looks like in an ISE deployment, and where candidates commonly stumble.

Architecture and deployment (10%)

Know the ISE personas and what each does, how a distributed deployment divides responsibility among nodes, and why certificate trust and naming matter so much to everything that follows. Many downstream failures, from portal warnings to broken posture agents, trace back to certificate decisions made at install time.

Endpoint compliance (10%)

Posture is about deciding whether a device meets your standards before granting full access. Expect to reason about posture policy, requirements, conditions and remediation, and how the Cisco Secure Client interacts with ISE during assessment. Understand the practical difference between an endpoint that is unknown, noncompliant and compliant, and how each state maps to an authorization result.

Network access device administration (10%)

This domain covers using ISE as a TACACS+ server for administrators of network devices. Know how device admin policy sets differ from network access policy sets, how command sets and shell profiles restrict what an administrator can do, and, newly explicit in v1.2, how TACACS+ accounting records administrative activity.

Troubleshooting as a cross-cutting skill

Across every domain, expect scenarios where something fails and you must identify why. Reading live authentication logs, interpreting failure reasons, and matching a rule hit to an unexpected result are central skills. If you want a sense of how demanding this feels in practice, How Hard Is the SISE Exam? Complete Difficulty Guide 2026 goes into where candidates report friction. You can also test your recall under timed conditions with the practice questions on the main practice test site.

Who Hires for ISE Skills

Identity-based access control is a standard requirement wherever organizations manage large numbers of users, devices and network segments. Typical employers and roles include:

• Enterprise security and network teams that run 802.1X across campuses, branch offices and hospitals, often hiring network security engineers and NAC administrators.
• Managed service providers and Cisco partners that deploy and operate ISE for customers, who value certified specialists for staffing and partner requirements.
• Consultancies and integrators that handle zero trust and segmentation projects, where ISE policy design is a core deliverable.
• Regulated environments such as healthcare, education and government, where guest access, BYOD and device compliance are everyday concerns.

Job titles vary, so search on the technology as well as the credential: ISE, 802.1X, network access control and TACACS+ all appear in postings. For more on the market side, see SISE Jobs and SISE Salary Guide 2026: Complete Earnings Analysis. Pay varies widely by region, experience and employer, so rely on current local postings rather than a single headline number.

Sequencing Your Preparation

Generic study habits matter less than the order in which you tackle SISE content. Because later domains depend on earlier concepts, a domain-driven sequence works better than studying in blueprint order. Here is one approach built around the weights:

For a fuller methodology see SISE Study Guide 2026: How to Pass on Your First Attempt, and keep the SISE Cheat Sheet 2026: One-Page Review of Must-Know Facts handy for last-week review. If official training is part of your plan, SISE Training covers the options, including the Cisco course that prepares for v1.2 and awards 32 CE credits.

Validity and Renewal

The Specialist certification is valid for three years. You can renew by retaking the exam or through continuing education, but the CE route requires 40 credits before expiry. The official course's 32 CE credits fall short of that on their own, so you would need additional qualifying activity. If you hold or pursue a full CCNP, the professional-level renewal requires 80 CE credits; a passed concentration exam earns 40 CE and a core exam earns 80.

Frequently Asked Questions