SCAZT: Cisco CCNP SCAZT (300-740)
Browse certifications
Exam Resources
Official learning paths, exam details, skills measured, and community resources to supplement your study.
About the SCAZT Exam
Master Cisco Secure Access — Zero Trust Network Access, SSE/SASE, identity and device trust, security policy, and cloud-delivered operations
The 300-740 SCAZT (Designing and Implementing Secure Cloud Access for Users and Endpoints) is a CCNP Security concentration exam built on the Cisco Secure Access Security Service Edge (SSE/SASE) platform. It validates your ability to design and implement secure cloud access: the Secure Access architecture and Zero Trust Network Access (ZTNA) concepts, identity-provider integration and multi-factor authentication with Cisco Duo, device posture and trust, security policy (web, DNS-layer, cloud-delivered firewall, DLP, malware, and threat protection), the access models (Secure Internet Access, Secure Private Access / ZTNA, and VPN as a Service), resource connectors and tunnels, and cloud-delivered operations and troubleshooting. Passing SCAZT earns the Cisco Certified Specialist - Secure Cloud Access badge and, with the SCOR 350-701 core, the CCNP Security certification. Original practice questions. Not affiliated with, endorsed by, or sourced from Cisco Systems certification exams.
Who Should Take This Exam?
SCAZT is designed for security engineers, cloud security architects, and SASE/SSE administrators who design and operate Cisco Secure Access. Cisco recommends 3-5 years of security-solution implementation experience; hands-on time with Cisco Secure Access, Duo, and Zero Trust access policy helps a lot.
Typical study time: 6-10 weeks of focused study
Exam Quick Facts
| Detail | Value |
|---|---|
| Exam Code | 300-740 SCAZT |
| Title | Designing and Implementing Secure Cloud Access for Users and Endpoints |
| Duration | 90 minutes |
| Questions | ~55-65 |
| Pass Score | ~750-850 / 1000 (Cisco does not publish the exact cut score) |
| Cost | $300 USD |
| Provider | Pearson VUE |
| Validity | 3 years |
| Question Types | Multiple choice, Drag-and-drop, Simulation |
Exam Domains & Weights
The SCAZT exam covers 5 domains. Focus your study time based on the weights below — higher-weighted domains have more exam questions.
| Domain | Weight | Practice Qs |
|---|---|---|
| Cisco Secure Access Concepts | 10% | 25 |
| Identity and Device | 20% | 50 |
| Policies | 30% | 75 |
| Access | 30% | 75 |
| Operations | 10% | 25 |
| Total | 100% | 250 |
💡 Study tip: Policies and Access each carry 30% — together that is 60% of the exam, so start there. Nail the boundaries that Cisco loves to test: SSE (SWG + CASB + ZTNA + FWaaS) is the security half of SASE (which adds SD-WAN); ZTNA grants per-application least-privilege access while VPN as a Service gives broader network-style reach; and DNS-layer security blocks at resolution while a Secure Web Gateway does full proxy inspection (which needs TLS decryption for HTTPS).
Practice Exam — 250 Questions
Prepare for the SCAZT with our 250-question practice exam covering all 5 exam domains. Every question is an original real-world Secure Cloud Access scenario with detailed explanations and maps to the official exam topics (v2.0, effective 27 August 2026).
What you get:
- ✅ Exam simulation mode with timer
- ✅ Spaced repetition for weak areas
- ✅ Detailed explanations for every question
- ✅ Progress tracking across domains
- ✅ 20 free questions — no account needed
Cisco Certification Path
Cisco certs follow: Entry (CCT) → Associate (CCNA) → Professional (CCNP) → Expert (CCIE). CCNP Security requires the SCOR 350-701 core exam plus one concentration — SCAZT 300-740 is the Secure Cloud Access (SSE/SASE/ZTNA) concentration.
Related Cisco Certifications
If you’re studying for the SCAZT, you might also be interested in these Cisco certifications:
- SCOR: Cisco CCNP SCOR (350-701) — the CCNP Security core that pairs with SCAZT — 200 practice questions
- SNCF: Securing Networks with Cisco Firewalls (300-710) — the Secure Firewall concentration — 250 practice questions
- SISE: Implementing and Configuring Cisco ISE (300-715) — identity, posture, and access control — 250 practice questions
- CyberOps: Cisco Certified CyberOps Associate (200-201) — 200 practice questions
- ENCOR: Cisco CCNP ENCOR (350-401) — 250 practice questions
Study Tips
- Start with the 30%-weight domains — Policies and Access are the backbone of the exam
- Use our practice exam — try the 20 free questions first to gauge your readiness
- Review explanations — don’t just check if you got it right; read why each answer is correct
- Master the access models — know when to choose Secure Internet Access vs Secure Private Access/ZTNA vs VPN as a Service for a requirement
- Simulate exam conditions — use the timed exam mode to practice under pressure