Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Cisco
Exam Format
90 min
60-70
825
Specialist
Registration
$300 USD
Pearson VUE or online proctoring
English
Validity
3 years
Pass any Expert-level exam; Pass any two Professional concentration exams; Pass the core exam and one concentration exam
300-715 Exam Topics and Domains
300-715 is organized into 7 weighted domains. Expect to work with Accounting, Device registration, Guest VLAN, MAB fallback, and more.
1
Architecture and Deployment
10%
Configure personas
Administration Node ConfigurationPolicy Service Node ConfigurationMonitoring Node Configuration
- Configure and manage ISE personas in distributed deployments
- Understand persona limitations and incompatibilities
- Design high availability for each persona type
Describe deployment options
Deployment Models
- Select appropriate deployment model based on requirements
- Understand deployment limitations and best practices
Describe hardware and virtual machine performance specifications
Hardware SpecificationsVirtual Machine Requirements
- Size ISE deployment based on endpoint count and throughput
- Understand VM requirements for different deployment sizes
Describe zero-touch provisioning
ZTP Implementation
- Implement zero-touch provisioning for ISE nodes
- Configure network infrastructure for ZTP support
2
Policy Enforcement
25%
Configure native AD and LDAP
Active Directory IntegrationLDAP Configuration
- Integrate ISE with Active Directory domains
- Configure LDAP as external identity source
- Troubleshoot authentication failures
Describe identity store options
Identity Store Types
- Select appropriate identity stores for use cases
- Configure identity source sequences
- Implement certificate-based authentication
Configure wireless network access using 802.1X
Wireless 802.1X Configuration
- Configure WLC for 802.1X authentication
- Implement EAP methods for wireless
- Configure dynamic authorization
Configure wired network access using 802.1X and IBNS 2.0
Monitor ModeLow Impact ModeClosed Mode
- Implement IBNS 2.0 deployment modes
- Configure flexible authentication
- Design phased deployment strategy
Implement MAB
MAC Authentication Bypass
- Configure MAB for non-802.1X devices
- Integrate MAB with profiling
- Secure MAB deployments
Configure Cisco TrustSec
TrustSec Implementation
- Design SGT architecture
- Configure SGT assignment methods
- Implement SGACL policies
Configure policies including authentication and authorization profiles
Policy Configuration
- Create policy sets for different use cases
- Configure authentication and authorization policies
- Implement exception handling
3
Web Auth and Guest Services
15%
Configure web authentication
Central Web AuthenticationLocal Web Authentication
- Implement central web authentication
- Configure local web authentication
- Customize portal pages
Configure guest access services
Guest Lifecycle Management
- Design guest access workflows
- Configure guest account settings
- Implement guest notifications
Configure sponsor and guest portals
Sponsor Portal ConfigurationGuest Portal Configuration
- Configure sponsor portals
- Customize guest portals
- Implement social login
4
Profiler
15%
Implement profiler services
Profiler Service Configuration
- Configure profiler service
- Create custom profiling policies
- Implement logical profiles
Implement probes
Profiler Probe Configuration
- Configure profiler probes
- Optimize probe deployment
- Troubleshoot probe issues
Implement CoA
Change of Authorization
- Configure CoA for profile changes
- Implement CoA in authorization policies
- Troubleshoot CoA issues
Configure endpoint identity management
Endpoint Database Management
- Manage endpoint database
- Configure endpoint groups
- Implement purge policies
5
BYOD
15%
Describe Cisco BYOD functionality
BYOD Use Cases and RequirementsBYOD Solution ComponentsBYOD Flow
- Understand BYOD architecture
- Design BYOD workflows
- Select appropriate BYOD model
Configure BYOD device on-boarding using internal CA
Internal CA ConfigurationSwitch and WLC Integration
- Configure ISE internal CA
- Implement BYOD onboarding
- Configure network devices for BYOD
Configure certificates for BYOD
Certificate Management
- Design certificate policies
- Configure certificate templates
- Implement certificate lifecycle
Configure block list/allow list
Device Access Control Lists
- Configure device access lists
- Implement lost device policies
- Manage device lifecycle
6
Endpoint Compliance
10%
Describe endpoint compliance, posture services, and client provisioning
Posture Assessment Overview
- Understand posture assessment architecture
- Select appropriate posture methods
- Design compliance policies
Configure posture conditions and policy, and client provisioning
Posture Policy ConfigurationClient Provisioning
- Configure posture conditions
- Create posture policies
- Implement client provisioning
Configure the compliance module
Compliance Module Setup
- Configure compliance integrations
- Implement threat-centric NAC
- Deploy vulnerability assessment
Configure posture agents and operational modes
Agent Configuration
- Configure posture agents
- Select operational modes
- Troubleshoot agent issues
Describe supplicant, supplicant options, authenticator, and server
802.1X Components
- Understand 802.1X architecture
- Configure supplicant settings
- Troubleshoot authentication issues
7
Network Access Device Administration
10%
Compare AAA protocols
RADIUS vs TACACS+
- Understand AAA protocol differences
- Select appropriate protocol for use case
- Configure protocol-specific features
Configure TACACS+ device administration and command authorization
TACACS+ ConfigurationCommand Authorization
- Configure TACACS+ for device administration
- Implement command authorization
- Create device administration policies
How do I earn this certification?
Passing 300-715 earns the CCNP Security certification. It sits in the Security track.
Current Level Exams
Next Level Options
- CCIE Security Lab - CCIE Security Infrastructure Lab Exam
- 350-901 - DEVCOR - Developing Applications Using Cisco Core Platforms and APIs
Alternative Paths
- 300-710 - SNCF - Securing Networks with Cisco FirepowerFirewall and IPS expertise
- 300-720 - SESA - Securing Email with Cisco Email Security ApplianceEmail security specialization
- 300-725 - SWSA - Securing the Web with Cisco Web Security ApplianceWeb security focus
- 300-730 - SVPN - Implementing Secure Solutions with Virtual Private NetworksVPN and remote access security
- 300-735 - SAUTO - Automating Cisco Security SolutionsSecurity automation and orchestration
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for 300-715 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2023-02-24
- Announcement date: 2023-01-15
Updates
- pxGrid 3.0 3.0 New API capabilities and WebSocket support likely in next exam update ā¢ Release date: 2024-02-01
- ISE REST APIs Enhanced in 3.3 Automation topics may be expanded ā¢ Release date: 2024-09-01
- Zero Touch Provisioning Enhanced in v1.1 Added as new topic in exam v1.1 ā¢ Release date: 2023-02-24
Who should take this exam?
This exam is typically taken by Network Security Engineers and Network Administrators.
- Understanding of network security concepts
- Basic knowledge of Cisco networking devices
- Familiarity with 802.1X and RADIUS
- Experience with identity management concepts
- Knowledge of Active Directory and LDAP