Certification Overview

Cisco positions CCNP Security as evidence that a candidate can translate technical or business knowledge into repeatable workplace performance. Its scope centers on enterprise security architecture and implementation across firewalls, identity, cloud access, secure design, visibility, and enforcement. The active requirements are deliberately tied to Cisco's current technology and service portfolio, so preparation should combine conceptual study with configuration practice, scenario analysis, or workflow rehearsal as appropriate. Key coverage includes Security concepts — 25%, Network security — 20%, Securing the cloud — 15%, Cisco firewall policy, deployment, and management, NAT, routing, VPN, access control, high availability, and threat defense, Logging, troubleshooting, integration, and operations, ISE architecture, deployment, identity stores, certificates, and policy, 802.1X, profiling, posture, guest access, and device administration.

The credential is most relevant to security engineers, firewall specialists, identity engineers, cloud security practitioners, and security consultants. It can support entry into a new discipline, formalize experience already gained on the job, or document a specialization inside a broader Cisco certification path. Employers can use it as one signal that a practitioner understands Cisco terminology, recommended operating models, and the trade-offs involved in delivering reliable outcomes. It does not replace hands-on experience, but it supplies a structured benchmark against a published exam or program blueprint.

The earning rule is straightforward: Pass the active 350-701 SCOR core exam and one active security concentration exam; retiring concentration exams must be passed by their final test date. No formal prerequisites. Cisco nevertheless recommends that candidates build the practical background described in this document before attempting the requirement. Preparation should begin with the active blueprint, then proceed through Cisco training or equivalent study, guided labs, documentation review, and timed practice. Candidates should verify the exam appointment details in the registration system because taxes, currency conversion, local delivery availability, and version transitions can affect the final booking.

From a career perspective, the certification maps to Cybersecurity and the selected level is Professional Level. After earning it, holders should retain their score report, monitor the credential in Cisco's certification tracking system, and understand any expiration or renewal rule before the renewal window becomes urgent. Cisco updates exams as technologies evolve; therefore, candidates close to a published transition date should compare the active and announced blueprints and schedule against the version they intend to take.

Track Details & Exam Requirements

Certification provider: Cisco

Credential type: Professional certification

Current status: Active

Research currency: Checked against Cisco-controlled certification and exam information on 25 August 2026

Official earning rule: Pass the active 350-701 SCOR core exam and one active security concentration exam; retiring concentration exams must be passed by their final test date

Formal prerequisites: No formal prerequisites

Recommended background: Cisco recommends three to five years implementing security solutions

Exam 1 — 350-701 SCOR: Implementing and Operating Cisco Security Core Technologies

Path position: Required core exam

Exam version: v1.1

Exam status: Active through 26 August 2026; v2.0 effective 27 August 2026

Duration: 120 minutes

Price: US$400

Languages: English and Japanese

Delivery: Secure, proctored exam through Pearson VUE, online or at an authorized test center where available

Number of questions: Not officially specified

Passing score: Not officially specified

Skills measured: The active Cisco blueprint covers:

• Security concepts — 25%
• Network security — 20%
• Securing the cloud — 15%
• Content security — 15%
• Endpoint protection and detection — 10%
• Secure network access, visibility, and enforcement — 15%

Current exam note: The v1.1 exam is the current version on the research date. Cisco has announced SCOR v2.0 for 27 August 2026; candidates testing after the transition must use the new blueprint.

Exam 2 — 300-710 SNCF: Securing Networks with Cisco Firewalls

Path position: Concentration option — choose one

Exam version: Not officially specified

Exam status: Active

Duration: 90 minutes

Price: US$300

Languages: English and Japanese

Delivery: Secure, proctored exam through Pearson VUE, online or at an authorized test center where available

Number of questions: Not officially specified

Passing score: Not officially specified

Skills measured: The active Cisco blueprint covers:

• Cisco firewall policy, deployment, and management
• NAT, routing, VPN, access control, high availability, and threat defense
• Logging, troubleshooting, integration, and operations

Exam 3 — 300-715 SISE: Implementing and Configuring Cisco Identity Services Engine

Path position: Concentration option — choose one

Exam version: Not officially specified

Exam status: Active

Duration: 90 minutes

Price: US$300

Languages: English and Japanese

Delivery: Secure, proctored exam through Pearson VUE, online or at an authorized test center where available

Number of questions: Not officially specified

Passing score: Not officially specified

Skills measured: The active Cisco blueprint covers:

• ISE architecture, deployment, identity stores, certificates, and policy
• 1X, profiling, posture, guest access, and device administration
• Segmentation, integration, monitoring, and troubleshooting

Exam 4 — 300-740 SCAZT: Designing and Implementing Secure Cloud Access for Users and Endpoints

Path position: Concentration option — choose one

Exam version: v1.0

Exam status: Active

Duration: 90 minutes

Price: US$300

Languages: English

Delivery: Secure, proctored exam through Pearson VUE, online or at an authorized test center where available

Number of questions: Not officially specified

Passing score: Not officially specified

Skills measured: The active Cisco blueprint covers:

• Secure access service edge and cloud-delivered security
• Users, endpoints, identity, policy, private access, and internet security
• Deployment, integrations, operations, visibility, and troubleshooting

Exam 5 — 300-745 SDSI: Designing Cisco Security Infrastructure

Path position: Concentration option — choose one

Exam version: v1.0

Exam status: Active

Duration: 90 minutes

Price: US$300

Languages: English

Delivery: Secure, proctored exam through Pearson VUE, online or at an authorized test center where available

Number of questions: Not officially specified

Passing score: Not officially specified

Skills measured: The active Cisco blueprint covers:

• Security architecture, requirements, risk, and design principles
• Network, cloud, endpoint, identity, data, and application controls
• Resilience, integration, validation, governance, and operations

Exam 6 — 300-720 SESA: Securing Email with Cisco Email Security Appliance

Path position: Retiring concentration option

Exam version: Not officially specified

Exam status: Retiring — final test date 26 August 2026

Duration: 90 minutes

Price: US$300

Languages: English and Japanese

Delivery: Secure, proctored exam through Pearson VUE, online or at an authorized test center where available

Number of questions: Not officially specified

Passing score: Not officially specified

Skills measured: The active Cisco blueprint covers:

• Email security deployment, policy, filtering, authentication, and protection
• Administration, reporting, troubleshooting, and integrations

Exam 7 — 300-725 SWSA: Securing the Web with Cisco Web Security Appliance

Path position: Retiring concentration option

Exam version: Not officially specified

Exam status: Retiring — final test date 26 August 2026

Duration: 90 minutes

Price: US$300

Languages: English and Japanese

Delivery: Secure, proctored exam through Pearson VUE, online or at an authorized test center where available

Number of questions: Not officially specified

Passing score: Not officially specified

Skills measured: The active Cisco blueprint covers:

• Web security deployment, policy, access control, malware defense, and reporting
• Administration, authentication, integrations, and troubleshooting

Exam 8 — 300-730 SVPN: Implementing Secure Solutions with Virtual Private Networks

Path position: Retiring concentration option

Exam version: Not officially specified

Exam status: Retiring — final test date 26 August 2026

Duration: 90 minutes

Price: US$300

Languages: English and Japanese

Delivery: Secure, proctored exam through Pearson VUE, online or at an authorized test center where available

Number of questions: Not officially specified

Passing score: Not officially specified

Skills measured: The active Cisco blueprint covers:

• Site-to-site and remote-access VPN architecture
• IKE, IPsec, client access, high availability, monitoring, and troubleshooting

Additional requirement details

• Minimum listed exam fees for one core plus one concentration are US$700 before taxes or regional adjustments.
• Candidates testing from 27 August 2026 must prepare for SCOR v2.0 rather than v1.1.

Registration, results, and tracking

• Create or use a Cisco account and keep the legal name aligned with the government-issued identification used for the appointment.
• Register through Cisco's authorized delivery workflow; Pearson VUE administers Cisco proctored written exams, while expert practical exams use Cisco-designated lab delivery.
• Grading is pass/fail. Cisco states that results for proctored written exams are generally available online within 48 hours; practical result timing follows the applicable lab program.
• Use Cisco's certification tracking environment to confirm exam history, credential status, expiration dates, and available digital certification records.
• A failed entry, associate, professional, specialist, or CCDE written exam normally requires a five-calendar-day wait; expert lab/practical retakes normally require 30 days. A passed exam generally cannot be repeated for 180 days.

Current update

SCOR v1.1 remains the current core exam through 26 August 2026. SCOR v2.0 becomes effective on 27 August 2026. Cisco also lists SESA, SWSA, and SVPN with a final test date of 26 August 2026; candidates using those retiring concentration exams must test by that date.

Validity & Recertification

Validity period: Three years from the date the certification is earned

Continuing Education requirement: 80 Continuing Education credits for professional-level certifications; 40 credits when maintained as a specialist credential

Renewal method: Renew before expiration by meeting Cisco's current eligible examination or Continuing Education requirements

Renewal timing: Complete all eligible requirements before the credential expiration date; no extension should be assumed

If the credential expires: Complete the full current earning process again unless Cisco's rules for this specific credential state otherwise

Reminder and recordkeeping: Keep the Cisco account email current and monitor the certification tracker; reminder delivery is helpful but remains the holder's responsibility