SCAZT-300-740 · blueprint v2.0
SCAZT-300-740 exam topics
The blueprint wording exactly as Cisco publishes it, with every lesson that covers each objective. The version lives inside the page — never in the path.
Domain 1 · 10% of the exam
Concepts
-
1.1 — Describe industry cloud security frameworks such as NIST SP 800-207 and CISA Zero Trust Maturity Model v2.0
-
1.2 — Select mitigation methods to defend against attacker tactics and techniques using MITRE ATT&CK cloud frameworks (identity providers, SaaS, and IaaS)
-
1.3 — Describe security requirements for public cloud platforms (AWS, Azure, GCP)
-
1.4 — Describe operational requirements for public cloud platforms (AWS, Azure, GCP)
-
1.5 — Describe private cloud including local hypervisors (VMware) and container orchestration platforms (Kubernetes)
-
1.6 — Describe how eBPF-based tools (Cilium, Tetragon) provide runtime security observability and enforcement for containerized workloads
Domain 2 · 20% of the exam
Identity
-
2.1 — Describe the use and function of identity intelligence across IDPs
-
2.2 — Implement user and device authentication via identity certificates
-
2.3 — Implement multifactor authentication (including phishing resistant) for users and devices with Cisco Duo
-
2.4 — Implement endpoint posture policies for user access to resources
-
2.5 — Configure user and device trust using SAML authentication for mobile or web applications
-
2.6 — Configure SSO and user provisioning using IDP connection
Domain 3 · 30% of the exam
Policies
-
3.1 — Describe encryption methods for data in transit and at rest in cloud environments (TLS, IPsec in context, tunnels)
-
3.2 — Describe how features (IPS, DLP, malware protection) help provide secure private access
-
3.3 — Describe the use, purpose, and characteristics of AI Defense
-
3.4 — Describe AI features in Secure Access (AI Access and AI Guardrails)
-
3.5 — Describe how web application firewalls protect against DDoS
-
3.6 — Determine security policies for network security edge to enforce application policy
-
3.7 — Determine security policies for application enforcement using Cisco Secure Workload and enforcement agents
Domain 4 · 30% of the exam
Access
Domain 5 · 10% of the exam
Operations
-
5.1 — Select the process or tool providing cloud application visibility, microsegmentation, traffic analysis, and policy enforcement based on security requirements
-
5.2 — Interpret traffic flow and telemetry reports for baseline and compliance behavior analysis
-
5.3 — Interpret Cisco Secure Access dashboards
-
5.4 — Integrate Cisco Secure Access with Cisco XDR and Splunk Enterprise to enhance SOC operations