A great way to start the Cisco Certified Specialist - Designing Cisco Security Infrastructure (SDSI) preparation is to begin by properly appreciating the role that syllabus and study guide play in the Cisco 300-745 certification exam. This study guide is an instrument to get you on the same page with Cisco and understand the nature of the Cisco CCNP Security exam.
Our team of experts has composed this Cisco 300-745 exam preparation guide to provide the overview about Cisco Designing Cisco Security Infrastructure exam, study material, sample questions, practice exam and ways to interpret the exam objectives to help you assess your readiness for the Cisco SDSI exam by identifying prerequisite areas of knowledge. We recommend you to refer the simulation questions and practice test listed in this guide to determine what type of questions will be asked and the level of difficulty that could be tested in the Cisco CCNP Security certification exam.
Cisco 300-745 Exam Overview:
|
Exam Name
|
Designing Cisco Security Infrastructure |
| Exam Number | 300-745 SDSI |
| Exam Price | $300 USD |
| Duration | 90 minutes |
| Number of Questions | 55-65 |
| Passing Score | Variable (750-850 / 1000 Approx.) |
| Exam Registration | PEARSON VUE |
| Sample Questions | Cisco 300-745 Sample Questions |
| Practice Exam | Cisco Certified Specialist - Designing Cisco Security Infrastructure Practice Test |
Cisco 300-745 Exam Topics:
| Section | Weight | Objectives |
|---|---|---|
| Secure Infrastructure | 30% |
- Select the security approaches to protect against threats
- Modify the security architecture to address technical requirements
- Select a VPN and tunneling solution such as SD-WAN, IPsec, MPLS, GRE, DMVPN, and public cloud tunnel options based on business and technical requirements
- Select the approach to secure the infrastructure management and control planes - Select the firewall feature or architecture such as traditional firewall, Nextgen firewall, Web Application Firewall, IPS/IDS, distributed firewall, eBPF, and host-based firewall given business and technical requirements |
| Applications | 25% |
- Select the security solution such as firewalls, SSL offloading, SSL decryption, DLP, and endpoint based on application and flow data, to protect an application
- Select the design for cloud-native applications, microservices, containers, and serverless architectures to ensure segmentation/microsegmentation - Describe the design policies to address the impacts of emerging technologies such as generative AI, machine learning, and quantum computing |
| Risk, Events, and Requirements | 30% |
- Describe how the SOC leverages incident handling and incident response tools
- Modify a design to mitigate risk - Modify a security design following an incident - Describe the use of frameworks such as MITRE CAPEC, NIST SP 800-37, and SAFE in the lifecycle of a security design - Match the regulatory and industry compliance document to a given business or technical scenario |
| Artificial Intelligence, Automation, and DevSecOps | 15% |
- Describe the functions, uses, and role of AI in securing network infrastructure
- Select the feature or element required to support automated security architecture/infrastructure such as API tooling, Infrastructure as Code, monitoring, container scanning, security telemetry, alerting, and SOAR - Select the next step in workflows and pipelines to be implemented by DevSecOps engineers to minimize risk from automated deployments |
Cisco SDSI Exam Description:
Designing Cisco Security Infrastructure v1.0 (SDSI 300-745) is a 90-minute exam associated with the CCNP Security Certification. This exam tests a candidate's knowledge of security architecture design, including secure infrastructure, applications, risk, events, requirements, artificial intelligence, automation, and DevSecOps. The course, Designing Cisco Security Infrastructure, helps candidates to prepare for this exam.