What is the Cisco 300-745 SDSI exam?

The Cisco 300-745 SDSI (Designing Cisco Security Infrastructure) is a 90-minute exam that validates a candidate's knowledge of security architecture design, covering secure infrastructure, applications, risk and events, requirements, artificial intelligence, automation, and DevSecOps. It is a concentration exam within the CCNP Security certification track.

How many questions are on the 300-745 exam and how long is it?

The 300-745 SDSI exam is 90 minutes long and typically contains 55-65 questions, delivered through Pearson VUE at a testing center or via online proctoring.

How much does the Cisco 300-745 SDSI exam cost?

The 300-745 SDSI exam costs 300 USD, excluding applicable local taxes. Prices may vary by country and are subject to change.

Which certification does the 300-745 SDSI exam count toward?

Passing the 300-745 SDSI exam earns the Cisco Certified Specialist - Designing Cisco Security Infrastructure certification and satisfies the concentration exam requirement for CCNP Security. It must be paired with the 350-701 SCOR core exam to complete CCNP Security.

What topics does the 300-745 SDSI exam cover?

The exam covers four domains: Secure Infrastructure (30%), Applications (25%), Risk, Events, and Requirements (30%), and Artificial Intelligence, Automation, and DevSecOps (15%).

What is the passing score for the 300-745 exam?

Cisco does not publish a fixed passing score for the 300-745 SDSI exam. Scores are reported on a scale (commonly 300-1000) and cut scores can vary by exam form because Cisco periodically adjusts them through statistical analysis.

Is the 300-745 SDSI exam new?

Yes. Designing Cisco Security Infrastructure (300-745 SDSI) v1.0 launched on May 20, 2025 as a newer CCNP Security concentration exam, adding a design-focused option that emphasizes AI, automation, and DevSecOps alongside the existing implementation-focused concentrations.

Who should take the 300-745 SDSI exam?

It is aimed at security architects, network security engineers, solution designers, security consultants, and SOC architects, especially professionals moving from security implementation into security design responsibilities.

300-745 Practice Test with 150 Questions (2026)

Why Study with PlanetCert?

The Latest Questions

Practice questions and exam topics aligned with the current exam objectives.

Detailed Explanations

Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.

AI-Powered Insights

Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.

Exam Information

Official specifications published by Cisco

Exam Format

Duration90 min

Questions55-65

Passing ScoreVariable (Cisco does not publish a fixed passing score)

LevelProfessional (CCNP Security concentration)

Registration

Exam Fee$300 USD

DeliveryPearson VUE or online proctoring

Validity

Valid For3 years

RecertificationPass any one professional concentration exam; Pass the CCNP Security core exam (350-701 SCOR); Pass any CCIE written/lab exam

300-745 Exam Topics and Domains

300-745 is organized into 4 weighted domains. Expect to work with ISE, Umbrella, Cisco Secure Access, Cisco Secure Firewall, and more.

Secure Infrastructure

30%

Select the security approaches to protect against threats

Endpoint and client devices (on-network, off-network, and remote)Identity such as MFA, passwordless, continuous trust, and identity intelligenceEmail (phishing, ransomware, business email compromise, malware, and spoofing)

Objectives

Select the security approaches to protect against threats

Modify the security architecture to address technical requirements

Hybrid workersIoTSaaSApplications across data center and multi-cloud

Objectives

Modify the security architecture to address technical requirements

Select a VPN and tunneling solution such as SD-WAN, IPsec, MPLS, GRE, DMVPN, and public cloud tunnel options based on business and technical requirements

VPN and tunneling technology selection

Objectives

Select a VPN and tunneling solution based on business and technical requirements

Select the approach to secure the infrastructure management and control planes

Management and control plane protection

Objectives

Select the approach to secure the infrastructure management and control planes

Select the firewall feature or architecture such as traditional firewall, Nextgen firewall, Web Application Firewall, IPS/IDS, distributed firewall, eBPF, and host-based firewall given business and technical requirements

Firewall feature/architecture selection

Objectives

Select the firewall feature or architecture given business and technical requirements

Applications

25%

Select the security solution such as firewalls, SSL offloading, SSL decryption, DLP, and endpoint based on application and flow data, to protect an application

Application-protection solution selection

Objectives

Select the security solution to protect an application based on application and flow data

Select the design for cloud-native applications, microservices, containers, and serverless architectures to ensure segmentation/microsegmentation

Cloud-native segmentation design

Objectives

Select the design for cloud-native applications to ensure segmentation/microsegmentation

Describe the design policies to address the impacts of emerging technologies such as generative AI, machine learning, and quantum computing

Emerging-technology design policy

Objectives

Describe the design policies to address the impacts of emerging technologies

Risk, Events, and Requirements

30%

Describe how the SOC leverages incident handling and incident response tools

SOC incident handling and response tooling

Objectives

Describe how the SOC leverages incident handling and incident response tools

Modify a design to mitigate risk

Risk-driven design modification

Objectives

Modify a design to mitigate risk

Modify a security design following an incident

Post-incident design change

Objectives

Modify a security design following an incident

Describe the use of frameworks such as MITRE CAPEC, NIST SP 800-37, and SAFE in the lifecycle of a security design

Security design frameworks

Objectives

Describe the use of frameworks in the lifecycle of a security design

Match the regulatory and industry compliance document to a given business or technical scenario

Regulatory and compliance mapping

Objectives

Match the regulatory and industry compliance document to a given scenario

Artificial Intelligence, Automation, and DevSecOps

15%

Describe the functions, uses, and role of AI in securing network infrastructure

AI in network security

Objectives

Describe the functions, uses, and role of AI in securing network infrastructure

Select the feature or element required to support automated security architecture/infrastructure such as API tooling, Infrastructure as Code, monitoring, container scanning, security telemetry, alerting, and SOAR

Automation feature selection

Objectives

Select the feature or element required to support automated security architecture/infrastructure

Select the next step in workflows and pipelines to be implemented by DevSecOps engineers to minimize risk from automated deployments

DevSecOps pipeline steps

Objectives

Select the next step in workflows and pipelines to minimize risk from automated deployments

How do I earn this certification?

Passing 300-745 earns the Cisco Certified Specialist - Designing Cisco Security Infrastructure / CCNP Security (with core) certification. It sits in the Security track.

Current Level Exams

350-701 - SCOR - Implementing and Operating Cisco Security Core Technologies

Next Level Options

350-701 - SCOR (also the CCIE Security qualifying exam)
CCIE Security Lab - CCIE Security Lab Exam

Alternative Paths

300-710 - SNCF - Securing Networks with Cisco FirepowerAlternative CCNP Security concentration
300-715 - SISE - Implementing and Configuring Cisco Identity Services EngineAlternative CCNP Security concentration
300-720 - SESA - Securing Email with Cisco Email Security ApplianceAlternative CCNP Security concentration
300-725 - SWSA - Securing the Web with Cisco Web Security ApplianceAlternative CCNP Security concentration
300-730 - SVPN - Implementing Secure Solutions with Virtual Private NetworksAlternative CCNP Security concentration
300-735 - SAUTO - Automating and Programming Cisco Security SolutionsAlternative CCNP Security concentration
300-740 - SCAZT - Designing and Implementing Secure Cloud Access for Users and Endpoints Alternative CCNP Security concentration

Practice with Precision

The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.

Launch Simulator

How to study for this exam?

The most effective way to prepare for 300-745 is by using the PlanetCert Simulator to practice questions and review detailed explanations.

What's changed on this exam?

Current Status

ACTIVE
Last content update: 2024

Updates

AI-driven security operations Domain 4.0 (15%) tests the functions, uses, and role of AI in securing infrastructure. • Release date: 2025
Post-quantum cryptography / emerging tech design policy Domain 2.3 tests design policies addressing generative AI, machine learning, and quantum computing. • Release date: 2025

Who should take this exam?

Recommended Preparation

Understanding of network security architecture and design
Familiarity with Cisco security portfolio (Secure Firewall, ISE, Duo, Umbrella/Secure Access, Secure Endpoint, Secure Email)
Working knowledge of AI, automation, and DevSecOps concepts

Why Study with PlanetCert?

The Latest Questions

Detailed Explanations

AI-Powered Insights

Exam Information

Exam Format

Registration

Validity

Secure Infrastructure

Select the security approaches to protect against threats

Modify the security architecture to address technical requirements

Select a VPN and tunneling solution such as SD-WAN, IPsec, MPLS, GRE, DMVPN, and public cloud tunnel options based on business and technical requirements

Select the approach to secure the infrastructure management and control planes

Select the firewall feature or architecture such as traditional firewall, Nextgen firewall, Web Application Firewall, IPS/IDS, distributed firewall, eBPF, and host-based firewall given business and technical requirements

Applications

Select the security solution such as firewalls, SSL offloading, SSL decryption, DLP, and endpoint based on application and flow data, to protect an application

Select the design for cloud-native applications, microservices, containers, and serverless architectures to ensure segmentation/microsegmentation

Describe the design policies to address the impacts of emerging technologies such as generative AI, machine learning, and quantum computing

Risk, Events, and Requirements

Describe how the SOC leverages incident handling and incident response tools

Modify a design to mitigate risk

Modify a security design following an incident

Describe the use of frameworks such as MITRE CAPEC, NIST SP 800-37, and SAFE in the lifecycle of a security design

Match the regulatory and industry compliance document to a given business or technical scenario

Artificial Intelligence, Automation, and DevSecOps

Describe the functions, uses, and role of AI in securing network infrastructure

Select the feature or element required to support automated security architecture/infrastructure such as API tooling, Infrastructure as Code, monitoring, container scanning, security telemetry, alerting, and SOAR

Select the next step in workflows and pipelines to be implemented by DevSecOps engineers to minimize risk from automated deployments

Practice with Precision

Related practice tests

Your Complete Exam Solution

Best-In-Class Practice Tests

Topical Breakdown

Flashcard Mode

See How You Compare Against Yourself

Other Exam Prep

PlanetCert

Study Naturally, Study Responsibly

Common Questions

Student Reviews