CCNP Security Exam Changes 2026: 300-720, 300-725, and 300-730 Retired - What Should You Take Now?
Key Cisco CCNP Security exam changes you need to know:
1. Three Concentration Exams Retired: 300-720 SESA, 300-725 SWSA, and 300-730 SVPN have been officially retired.
2. Core Exam & Concentration Paths Updated: The 350-701 SCOR v2.0 core exam has been updated, and the remaining concentration paths are now streamlined around four primary pillars.
If you are preparing for the CCNP Security credential, it is essential to understand not only which exams have been retired, but also how to choose the right concentration path based on your career goals.
300-720 SESA, 300-725 SWSA, and 300-730 SVPN Have Been Retired
The three retired concentration exams previously focused on distinct, appliance-specific Cisco security solutions:
| Retired Exam | Full Exam Name | Final Testing Date | Official Direct Replacement |
|---|---|---|---|
| 300-720 SESA | Securing Email with Cisco Secure Email Gateway | August 26, 2026 | None |
| 300-725 SWSA | Securing the Web with Cisco Secure Web Appliance | August 26, 2026 | None |
| 300-730 SVPN | Implementing Secure Solutions with Virtual Private Networks | August 26, 2026 | None |
What Does the New CCNP Security Certification Path Look Like?
The core requirement to earn the CCNP Security credential remains unchanged: pass one Core Exam plus one Concentration Exam of your choice.
[ 350-701 SCOR v2.0 Core Exam ]
+
[ Choose 1 Concentration: SNCF | SISE | SSCA | SDSI ]
=
CCNP Security Certified
Current CCNP Security Portfolio:
1. Core Exam:
º 350-701 SCOR v2.0: Implementing and Operating Cisco Security Core Technologies
2. Concentration Exams (Choose One):
º 300-710 SNCF: Securing Networks with Cisco Firewalls
º 300-715 SISE: Implementing and Configuring Cisco Identity Services Engine
º 300-740 SSCA: Designing and Implementing Secure Cloud Access for Users and Endpoints
º 300-745 SDSI: Designing Cisco Security Infrastructure
Recommended Alternatives for Retired Track Candidates
1. What Should 300-720 (SESA) & 300-725 (SWSA) Candidates Take Now?
Both SESA (Email Security) and SWSA (Web Security Appliance) focused on standalone legacy security appliances. Today’s enterprise environments rely on integrated Security Service Edge (SSE), Zero Trust Access, and cloud security.
• Logical Alternative: 300-740 SSCA
• Why: The updated 300-740 SSCA (formerly known as SCAZT) covers Cisco Secure Access, user/device security, network and cloud access, and threat response. If your goal was protecting user access to applications and email/web vectors, 300-740 SSCA is the modern architectural path forward.
2. What Replaces 300-730 (SVPN)?
Cisco has clarified that VPN skills are not obsolete, but manual VPN configuration alone is no longer broad enough to justify a dedicated professional-level concentration exam.
• Content Redistribution:
º 350-701 SCOR v2.0: Covers core VPN fundamentals and architecture.
º 300-710 SNCF: Covers site-to-site and remote access VPN implementation on Cisco Secure Firewall / FTD.
• Logical Alternative: 300-710 SNCF is the recommended choice for network security engineers who primarily work with firewalls and VPN connectivity.
350-701 SCOR Updated to v2.0 on August 27, 2026
The concentration changes coincide with the release of 350-701 SCOR v2.0—the first major update to the core exam since 2020. SCOR v2.0 reflects modern enterprise realities, incorporating:
• Cloud-delivered security and SSE frameworks
• AI-driven security automation and operations
• Updated threat defense strategies across cloud, hybrid, and physical environments
What If You Already Passed an Older Exam?
If you are mid-way through your certification journey, your hard work still counts:
• Passed SCOR v1.1 Before Aug 27, 2026? Your pass remains valid! You can combine it with any of the active concentration exams (SNCF, SISE, SSCA, or SDSI) within Cisco’s 3-year exam validity window.
• Passed a Retired Concentration (SESA, SWSA, SVPN)? It remains valid toward earning your CCNP Security as long as you pass the SCOR core exam within 3 years of passing that concentration.
• Active Certifications: If you already earned your CCNP Security before the changes, your credential remains active through its normal recertification cycle.
Which Concentration Should You Choose?
When selecting a CCNP Security concentration today, focus on your primary job role rather than looking for a legacy exam replacement:
• Select 300-710 SNCF if you work with network firewalls, threat defense, and Cisco Secure Firewall VPNs.
• Select 300-715 SISE if your focus is network access control, identity governance, and Cisco ISE.
• Select 300-740 SSCA if you deal with cloud access, user/endpoint security, Zero Trust, and SSE (ideal for former SESA/SWSA candidates).
• Select 300-745 SDSI if you are moving toward enterprise architecture, security automation, AI integration, and DevSecOps.
Cisco is moving away from appliance-based specialization toward solution-based and architectural expertise. Rather than looking for a direct substitute for retired exams, choose the concentration track that aligns best with the security engineering role you aim to perform in modern cloud and hybrid environments.
You can choose the latest practice tests from DumpsBase to complete your preparation:
