300-715 SISE: Implementing & Configuring Cisco Identity Services Engine

Upon successful completion of the CCNP 300-715 SISE: Implementing & Configuring Cisco Identity Services Engine credential, the bar of your CV raises and formalizes your skills with security solutions. To earn the CCNP Security certification, candidates must pass two exams: The core exam that covers a significant amount of base of the security technologies and the second one is a security concentration exam of a candidate’s choice. Aspirants can customize their credentials the way they want it.

Target Audience

The CCNP 300-715 SISE exam is formulated for candidates with knowledge of Architecture and deployment, Web Auth and guest services, Profiler, Network access device administration, etc. It is for Security engineer, Network engineer, Network designer, Network administrator, Systems engineer, etc.

Recommended Knowledge and Prerequisites

Basically, for the exam, it is suggested to have a basic understanding and knowledge of the topics that are going to be covered in the exam. Also, it’s observed and beneficial when aspirants have three to five years of experience implementing security solutions. The knowledge and skills you should have for this exam:

Familiarity with the Cisco IOS Software Command-Line Interface (CLI)
Familiarity with Cisco AnyConnect Secure Mobility Client
Familiarity with Microsoft Windows operating systems
Familiarity with 802.1X

Exam Details

Exam Name Implementing and Configuring Cisco Identity Services Engine	Exam Code 300-715 SISE
Exam Duration 90 mins	Exam Format Multiple Choice
Exam Fee $300 USD	Number of Questions 55-65
Validity 3 Years	Exam Language English, Japanese

CCNP 300-715 SISE Exam Policies

We shall now discuss some of the important policies related to exam results, assignment, retake policy and certification process.

Exam Result

Right after completing your exam, you will receive your score report which will be imprinted with your digital photo, captured during admission. The result will also contain a section-wise score breakout along with the passing score. You will have the option to share this photo-imprinted score reports with employers. You can also decide to provide them with preferred online access, for verification purposes, at the Authenticate score report. You can confirm the online photo and exam score results on the Pearson VUE candidate tracking webpage. This is an official method.

Exam Retake Policy

If you fail in the exam of Associate, Professional, Specialist, or CCDE level, then you must wait for a period of five (5) calendar days, before becoming eligible for taking a re-attempt. Once you have passed the exam, you must wait for a minimum of 180 days before becoming eligible to take the same exam, with an identical exam number. Candidates failing in an Online / Un-Proctored Cisco (700-xxx series) exam will have to wait for forty-eight hours (48hrs) before retesting the same exam.

Re-certification

Your CCNP 300-715 SISE certification will be valid only for a period of three years. After three years you will have to re-certify yourself to gain desired benefits. You can re-certify yourself by completing education activities, by taking exams, or by a combination of both. These are the ways available for re-certification.

Take an exam
Attend Cisco Live training sessions
Author content
Complete online training courses
Complete instructor-led training
Three-year re-certification requirement

For More Details See – CCNP 300-715 SISE FAQ

Course Outline

The CCNP 300-715 SISE exam covers the following domains.

Architecture and Deployment 10%

1.1 Configure personas

1.2 Describe deployment options (Cisco Reference: Setting Up Cisco ISE in a Distributed Environment)

Policy Enforcement 25%

2.1 Configure native AD and LDAP (Cisco Reference: Manage Users and External Identity Sources)

2.2 Describe identity store options (Cisco Reference: Managing External Identity Sources)

2.3 Configure wired/wireless 802.1X network access

LDAP (Cisco Reference: Configuring LDAP)
AD
PKI (Cisco Reference: Cisco IOS PKI Overview Understanding and Planning a PKI)
OTP
Smart Card (Cisco Reference: Smartcard)
Local

2.4 Configure 802.1X phasing deployment (Cisco Reference: Wired 802.1X Deployment Guide)

2.5 Configure network access devices

Monitor mode (Cisco Reference: Monitor Mode)
Low impact
Closed mode

2.6 Implement MAB (Cisco Reference: MAC Authentication Bypass Deployment Guide)

2.7 Configure Cisco TrustSec (Cisco Reference: Cisco TrustSec Switch Configuration Guide, How to configure Cisco TrustSec (SGTs) using Cisco ISE)

2.8 Configure policies including authentication and authorization profiles (Cisco Reference: Managing Authorization Policies and Profiles)

Web Auth and Guest Services 15%

3.1 Configure web authentication (Cisco Reference: Configuring Web-Based Authentication)

3.2 Configure guest access services (Cisco Reference: Configure Guest Access)

3.3 Configure sponsor and guest portals (Cisco Reference: Configure Guest Access)

Profiler 15%

4.1 Implement profiler services (Cisco Reference: Cisco ISE Endpoint Profiling Policies)

4.2 Implement probes (Cisco Reference: Probe Configuration Mode Commands)

4.3 Implement CoA

4.4 Configure endpoint identity management (Cisco Reference: Managing Identities and Admin Access)

BYOD 15%

5.1 Describe Cisco BYOD functionality

Use cases and requirements (Cisco Reference: BYOD Use Cases, BYOD Use Cases)
Solution components (Cisco Reference: Cisco BYOD Solution Components)
BYOD flow

5.2 Configure BYOD device onboarding using internal CA with Cisco switches and Cisco wireless LAN controllers

5.3 Configure certificates for BYOD

5.4 Configure blacklist/whitelist (Cisco Reference: BYOD Limited Use Case)

Endpoint Compliance 10%

6.1 Describe endpoint compliance, posture services, and client provisioning (Cisco Reference: Configure Client Posture Policies)

6.2 Configure posture conditions and policy, and client provisioning (Cisco Reference: Posture Types, Configure Client Posture Policies)

6.3 Configure the compliance module (Cisco Reference: How To Configure Posture with AnyConnect Compliance Module)

6.4 Configure Cisco ISE posture agents and operational modes (Cisco Reference: Posture Types)

6.5 Describe supplicant, supplicant options, authenticator, and server

Network Access Device Administration 10%

7.1 Compare AAA protocols (Cisco Reference: AAA Protocols)

7.2 Configure TACACS+ device administration and command authorization (Cisco Reference: Control Device Administration Using TACACS+)

Preparation Guide for the CCNP 300-715 SISE Exam

Exams and their preparations can be overwhelming! There are just so many checklists and essentials to be followed, pinned up and to be executed. It takes a lot of energy, time and efforts. Especially when it comes to finding the right sort of resources and libraries. Online forums could be cheesy and disturbing when they don’t turn out to give productive content while some can be good but charge fees. In all of the mess from organizing to executing and drawing out statistics, in the end, candidates exhaust themselves by also doing some of the wrong and unnecessary things too. So below are the preparation resources that’ll turn out to be helpful in your exam prep.

Learning Resource 1 – Official Study Guide

The official website provides it’s aspirants an Official Study Guide to help them follow all the basic procedures and processes and give the information they need. It’s crucial to at least read the document once and highlight the important things, so that when you need the information; you will have it and would have to scroll all the time. Also, it provides examinees with sample question papers to give a gist of the exam which is again beneficial and helpful. GO through it once and remember the pattern of it, candidates can also make their own speed test question papers by observing them.

Learning Resource 2 – Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0 Course

The Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0 Course course helps candidates while they are preparing for Cisco’s CCNP Security and CCIE Security certifications and also for other senior-level security roles.

Convenient modes: This course is available as an Instructor-led training which is 5 days of the classroom with hands-on lab learning sessions and it also provides 3 days of self-paced material for practice. This course is also accessible in Virtual instructor-led training mode with 5 days of web-based classes with lab learning sessions and an equivalent of 3 days of self-paced material for rehearsals. Also, the course offers an E-learning mode with 8 days of content with videos and challenges for practicing.
Prerequisites for this course: Candidates must be familiar with Ethernet and TCP/IP networking, working knowledge of the Windows operating system, working knowledge of Cisco IOS networking and concepts, etc. The Implementing and Administering Cisco Solutions (CCNA) v1.0 course will help candidates to fulfill the prerequisites.

Learning Resource 3 – Implementing and Configuring Cisco Identity Services Engine (SISE)

The Implementing and Configuring Cisco Identity Services Engine (SISE) course will provide a streamlined experience to candidates for implementing and customizing guest network access and teach to provide secure business and context-based access on policies, manage profiler, authentication, etc. Also, help aspirants to attain progressive and leading-edge career skills.

Duration: The Instructor-led training of this course is for 5 days of the classroom with hands-on lab learning sessions. The Virtual instructor-led training model offers 5 days of web-based classes with hands-on lab learning sessions and practice. The E-learning mode provides 5 days of content with videos and changes for rehearsals and practices.
Prerequisites: Candidates must be familiar with the Cisco IOS Software Command-Line Interface (CLI), Cisco AnyConnect Secure Mobility Client, Microsoft Windows operating systems, and 802.1X.

Learning Resource 4 – Cisco Community

The Cisco community is referred to as the place for Networking Professionals so that they can engage with each other and essentially with Cisco in order to share knowledge, excavating explanations to common dilemmas, and extending their potentials with the Cisco products. Here, the candidate can collaborate with peers and Cisco on all aspects of the networking comprising Cisco Digital Network Architecture, routing, switching, network management, and many more.

Evaluate with Practice Tests

Practice tests/mock tests help a lot in limiting your mistakes. Mistakes made in practice tests can be easily avoided in the actual exam. Solving the CCNP 300-715 SISE Practice Tests helps training your brain, which is very essential from the exam point of view. This will not only make you familiar with the real exam environment. But will also build your confidence, which is much needed to crack a professional level exam, in one go.