Cisco 300-715 SISE and 300-725 SWSA CCNP Exam Tests 2026

Welcome to Exam Cisco Certified Network Professional (CCNP) Security 300-715 SISE and 300-725 SWSA Verified QA Tests 2026

300-715 SISE Exam :-

Implementing and Configuring Cisco Identity Services Engine (SISE 300-715) is a 90-minute exam associated with the CCNP Security Certification. This exam tests a candidate's knowledge of Cisco Identity Services Engine (ISE), including architecture and deployment, policy enforcement, Web Auth and guest services, profiler, BYOD, endpoint compliance, and network access device administration. The course, Implementing and Configuring Cisco Identity Services Engine, helps candidates to prepare for this exam.

300-715 SISE Exam Topics -

1.0 Architecture and Deployment

1.1 Configure personas

1.2 Describe deployment options

1.3 Describe hardware and virtual machine performance specifications

1.4 Describe zero-touch provisioning

2.0 Policy Enforcement

2.1 Configure native AD and LDAP

2.2 Describe identity store options

2.2.a LDAP

2.2.b AD

2.2.c PKI

2.2.d Multifactor authentication

2.2.e Local

2.2.f SAML IDP

2.2.g Rest ID

2.3 Configure wireless network access using 802.1X

2.4 Configure wired network access using 802.1X and IBNS 2.0

2.4.a Monitor mode

2.4.b Low impact

2.4.c Closed mode

2.5 Implement MAB

2.6 Configure Cisco TrustSec

2.7 Configure policies including authentication and authorization profiles

3.0 Web Auth and Guest Services

3.1 Configure web authentication

3.2 Configure guest access services

3.3 Configure sponsor and guest portals

4.0 Profiler

4.1 Implement profiler services

4.2 Implement probes

4.3 Implement CoA

4.4 Configure endpoint identity management

5.0 BYOD

5.1 Describe Cisco BYOD functionality

5.1.a Use cases and requirements

5.1.b Solution components

5.1.c BYOD flow

5.2 Configure BYOD device on-boarding using internal CA with Cisco switches and Cisco wireless LAN controllers

5.3 Configure certificates for BYOD

5.4 Configure block list/allow list

6.0 Endpoint Compliance

6.1 Describe endpoint compliance, posture services, and client provisioning

6.2 Configure posture conditions and policy, and client provisioning

6.3 Configure the compliance module

6.4 Configure posture agents and operational modes

6.5 Describe supplicant, supplicant options, authenticator, and server

7.0 Network Access Device Administration

7.1 Compare AAA protocols

7.2 Configure TACACS+ device administration and command authorization

300-725 SWSA Exam -

Securing the Web with Cisco Secure Web Appliance (SWSA 300-725) is a 90- minute exam associated with the CCNP Security Certification. This exam tests a candidate's knowledge of Cisco Secure Web Appliance (formerly Cisco Web Security Appliance), including proxy services; authentication; decryption policies, differentiated traffic access policies, and identification policies; acceptable use control settings; malware defense; and data security and data loss prevention.

1.0 Features

1.1 Describe Cisco Secure Web Appliance features and functionality

1.1.a Proxy service

1.1.b Cognitive Intelligence (formerly Cognitive Threat Analytics)

1.1.c Data loss prevention service

1.1.d Integrated L4TM service

1.1.e Management tools

1.2 Describe Secure Web Appliance solutions

1.2.a Cisco Advanced Web Security Reporting

1.2.b Cisco Secure Email and Web Manager

1.3 Integrate Cisco Secure Web Appliance with Advanced Web Security Reporting

1.4 Integrate Cisco Secure Web Appliance with Cisco ISE

1.5 Troubleshoot data security and external data loss using log files

2.0 Configuration

2.1 Perform initial configuration tasks on Cisco Secure Web Appliance

2.2 Configure an access policy

2.3 Configure and verify web proxy features

2.3.a Explicit proxy functionality

2.3.b Proxy access logs using CLI

2.3.c Active directory proxy authentication

2.4 Configure a referrer header to filter web categories

3.0 Proxy Services

3.1 Describe deployment options

3.1.a Explicit proxy

3.1.b Transparent proxy

3.1.c Upstream proxy

3.1.d High availability

3.2 Describe these features:

3.2.a Tune caching

3.2.b IP spoofing

3.2.c Web proxy ports

3.2.d Range requests

3.3 Describe the functions of a Proxy Auto-Configuration (PAC) file

3.4 Describe the SOCKS protocol and the SOCKS proxy services

4.0 Authentication

4.1 Describe authentication features

4.1.a Supported authentication methods

4.1.b Authentication realms

4.1.c Supported authentication surrogates supported

4.1.d Bypassing authentication of problematic agents

4.1.e Authentication logs for accounting records

4.1.f Re-authentication

4.2 Configure traffic redirection to Cisco Secure Web Appliance using transparent proxy with WCCP, PBR, or an L4 switch

4.3 Describe the FTP proxy authentication

4.4 Troubleshoot authentication issues

5.0 Decryption Policies to Control HTTPS Traffic

5.1 Describe SSL and TLS inspection

5.2 Configure HTTPS capabilities

5.2.a HTTPS decryption policies

5.2.b HTTPS proxy function

5.2.c ACL tags for HTTPS inspection

5.2.d HTTPS proxy and verify TLS/SSL decryption

5.2.e Certificate types used for HTTPS decryption

5.3 Configure self-signed and intermediate certificates within SSL/TLS transactions

6.0 Differentiated Traffic Access Policies and Identification Profiles

6.1 Describe access policies

6.2 Describe identification profiles and authentication

6.3 Troubleshoot using access logs

7.0 Acceptable Use Control

7.1 Configure URL filtering

7.2 Configure time-based and traffic volume acceptable use policies and end user notifications

7.3 Configure web application visibility and control (Office 365, third-party feeds)

7.4 Create a corporate global acceptable use policy

7.5 Implement policy trace tool to verify corporate global acceptable use policy

7.6 Configure Secure Web Appliance to inspect archive file types

8.0 Malware Defense

8.1 Describe scanning engines

8.2 Configure file reputation filtering and file analysis

8.3 Describe Cisco Secure Endpoint

8.4 Describe integration with Cognitive Intelligence

9.0 Reporting and Tracking Web Transactions

9.1 Configure and analyze web tracking reports

9.2 Configure Cisco Advanced Web Security Reporting (AWSR)

9.2.a Basic web usage

9.2.b Custom filters

9.3 Troubleshoot connectivity issues

9.4 Interpret system health using the System Health Dashboard

9.5 Describe REST API support