100+ Free Cisco 300-745 SDSI Practice Questions
Pass your Cisco 300-745 SDSI: Designing Cisco Security Infrastructure v1.0 exam on the first try — instant access, no signup required.
A security architect must design a secure CI/CD pipeline. Which practice ensures that only trusted code reaches production?
Explore More Cisco Certifications
Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.
More From This Family
Videos and articles for deeper review.
Key Facts: Cisco 300-745 SDSI Exam
~60
Approximate Question Count
Cisco SDSI v1.0 exam description
90 min
Time Limit
Cisco SDSI v1.0 exam description
$300
Exam Fee (USD)
Cisco / Pearson VUE pricing
30/25/30/15
Domain Weightings
Infrastructure / Applications / Risk+Events / AI+Automation+DevSecOps
3 yrs
Certification Validity
CCNP Security concentration
Pearson VUE
Test Delivery
In-person or online proctored
Cisco 300-745 SDSI v1.0 is a 90-minute, ~60-question CCNP Security concentration exam costing $300 USD through Pearson VUE. The blueprint weights Secure Infrastructure 30%, Applications 25%, Risk/Events/Requirements 30%, and AI/Automation/DevSecOps 15%. This is a design-focused exam (not implementation) covering security architecture decisions for endpoints, identity (MFA/passwordless), hybrid workers, IoT, SaaS, cloud-native apps, microsegmentation, SOC workflows, threat intelligence, and DevSecOps pipeline integration. Passing earns the Cisco Certified Specialist - Designing Cisco Security Infrastructure badge.
Sample Cisco 300-745 SDSI Practice Questions
Try these sample questions to test your Cisco 300-745 SDSI exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.
1A security architect is designing a zero trust network access solution for a hybrid workforce. Which Cisco solution serves as the policy decision point for enforcing access based on identity, device posture, and context?
2An organization must protect a publicly facing web application from SQL injection and cross-site scripting attacks. Which firewall type is most appropriate for this specific requirement?
3A company with 50 branch offices needs to securely connect remote sites to headquarters and cloud applications while optimizing traffic across multiple WAN links. Which tunneling technology is the best design choice?
4A security architect must select a solution to provide phishing-resistant authentication for an organization moving to a zero trust model. Which approach best meets this requirement?
5An enterprise is designing a SASE architecture. Which combination of Cisco solutions provides both Security Service Edge (SSE) and SD-WAN capabilities in an integrated framework?
6A security team must implement continuous trust verification for remote workers accessing SaaS applications. Which design principle ensures that trust is evaluated throughout the session rather than only at login?
7An organization needs to block business email compromise (BEC) attacks that use impersonation of executives to request wire transfers. Which email security capability is most effective against this attack vector?
8A security architect must select a firewall deployment model for a multi-cloud environment with workloads in AWS, Azure, and on-premises data centers. Which approach provides consistent policy enforcement across all environments?
9An organization wants to implement DNS-layer security as a first line of defense for users both on and off the corporate network. Which Cisco solution provides this capability?
10A company needs to securely connect a small branch office with 10 users to the corporate network over broadband internet with minimal configuration overhead. Which approach is most appropriate?
About the Cisco 300-745 SDSI Exam
The Cisco 300-745 SDSI (Designing Cisco Security Infrastructure v1.0) is a 90-minute CCNP Security concentration exam covering security architecture design. Candidates demonstrate competence in designing secure infrastructure (endpoint, identity, email, VPN, firewall architecture), application security (cloud-native, containers, microsegmentation), risk management and SOC design (incident handling, threat intelligence, compliance), and emerging technologies (AI/ML, automation, DevSecOps). Passing earns the Cisco Certified Specialist - Designing Cisco Security Infrastructure badge.
Assessment
Approximately 55-65 multiple-choice and multiple-response questions covering Secure Infrastructure (30%), Applications (25%), Risk, Events, and Requirements (30%), and AI, Automation, and DevSecOps (15%)
Time Limit
90 minutes
Passing Score
Variable cut score (commonly cited 750-825/1000); Cisco does not publish the exact value
Exam Fee
$300 USD (Cisco / Pearson VUE)
Cisco 300-745 SDSI Exam Content Outline
Secure Infrastructure
Endpoint and client security approaches (on-network, off-network, remote); identity solutions (MFA, passwordless, continuous trust, identity intelligence); email threat mitigation (phishing, ransomware, BEC, spoofing); security architecture modification for hybrid workers, IoT, SaaS, and multi-cloud; VPN and tunneling solution selection (SD-WAN, IPsec, MPLS, GRE, DMVPN); infrastructure management and control plane security; firewall feature and architecture selection (traditional, NGFW, WAF, IPS/IDS, distributed, eBPF, host-based)
Applications
Security solution selection for applications (firewalls, SSL offloading/decryption, DLP, endpoint); cloud-native application security design (microservices, containers, serverless); segmentation and microsegmentation strategies; emerging technology design impacts (generative AI, machine learning, quantum computing)
Risk, Events, and Requirements
SOC incident handling and incident response tool integration; risk mitigation design modifications; threat intelligence integration into security architecture; security monitoring and visibility design; compliance-driven architecture requirements; vulnerability management in design
AI, Automation, and DevSecOps
AI/ML applications in security operations and threat detection; security automation design and orchestration (SOAR); DevSecOps pipeline integration; secure software development lifecycle (SSDLC); infrastructure as code security; API security design
How to Pass the Cisco 300-745 SDSI Exam
What You Need to Know
- Passing score: Variable cut score (commonly cited 750-825/1000); Cisco does not publish the exact value
- Assessment: Approximately 55-65 multiple-choice and multiple-response questions covering Secure Infrastructure (30%), Applications (25%), Risk, Events, and Requirements (30%), and AI, Automation, and DevSecOps (15%)
- Time limit: 90 minutes
- Exam fee: $300 USD
Keys to Passing
- Complete 500+ practice questions
- Score 80%+ consistently before scheduling
- Focus on highest-weighted sections
- Use our AI tutor for tough concepts
Cisco 300-745 SDSI Study Tips from Top Performers
Frequently Asked Questions
What is the Cisco 300-745 SDSI exam?
The 300-745 SDSI (Designing Cisco Security Infrastructure v1.0) is a 90-minute CCNP Security concentration exam. It focuses on security architecture design — not implementation — covering secure infrastructure, application security, risk/events/requirements, and AI/automation/DevSecOps. Passing earns the Cisco Certified Specialist - Designing Cisco Security Infrastructure badge.
How much does the 300-745 SDSI exam cost?
The exam costs $300 USD per attempt at Pearson VUE testing centers or via online proctoring.
What makes SDSI different from other CCNP Security exams?
SDSI is a design-focused exam that tests your ability to select and architect security solutions, not implement them. It covers broader architectural decisions across infrastructure, applications, risk management, and emerging technologies including AI and DevSecOps — unlike other concentration exams that focus on specific product implementation.
What topics does the SDSI 300-745 exam cover?
The blueprint covers Secure Infrastructure (30%), Applications (25%), Risk, Events, and Requirements (30%), and AI, Automation, and DevSecOps (15%). Topics include endpoint security design, identity architecture, VPN/tunneling selection, firewall architecture, cloud-native security, microsegmentation, SOC design, threat intelligence, and DevSecOps integration.