- What the ENDESIGN Certification Actually Is
- Exam Format and Delivery
- The 4D Method Behind the Blueprint
- Reading the Blueprint: Eleven Domains and Printed Weights
- SD-Access: Discovery, Design, Demonstration and Defend
- SD-WAN: Discover, Design and Demonstration
- ISE: Discover, Design, Demonstration and Defend
- Naming Quirks You Will See on Cisco Pages
- Who Hires and Who Should Sit This Exam
- Sequencing Your Preparation by Domain
- Frequently Asked Questions
- ENDESIGN is Cisco exam 500-490: 60 minutes, delivered through Pearson VUE, with a blueprint range of 30-40 questions.
- Eleven official domains cover SD-Access, SD-WAN and ISE, each organized around the 4D method: Discovery, Design, Demonstrate, Defend.
- The highest printed weight is 12%, shared by five domains; Cisco's printed weights sum to 102%, not 100%.
- SD-WAN and ISE together account for most of the blueprint, so neither can be treated as a side topic.
What the ENDESIGN Certification Actually Is
ENDESIGN stands for Designing Cisco Enterprise Networks for Field Engineers (ENDESIGN), the exam that leads to the Advanced Enterprise Networks Architecture Specialization. The exam code is 500-490. It is issued by Cisco Systems and aimed at field engineers: the people who sit between a customer's business requirements and the technology that eventually gets deployed. If you are searching for the broader basics first, the explainers at What Is ENDESIGN? and What Does ENDESIGN Stand For? cover the naming in more detail.
This distinction matters because the ENDESIGN acronym is shared by other credentials from other organizations. Everything on this page refers only to Cisco's 500-490 exam. If you land here from a search and are looking for a different "ENDESIGN," the facts about format, domains and weighting below will not transfer.
The scope of the exam is deliberately narrow and architectural. Rather than testing command-line configuration across a broad list of technologies, the blueprint concentrates on three Cisco enterprise solution areas (software-defined access, software-defined WAN, and identity-based network policy) and asks how a field engineer discovers requirements, designs a solution, demonstrates it, and defends it. You can get the full-scope picture on the ENDESIGN Certification page, and the practice material at our main practice test site follows the same blueprint structure.
Exam Format and Delivery
The logistics are simple compared with many Cisco exams, but a few details are worth knowing before you book.
| Attribute | ENDESIGN (500-490) |
|---|---|
| Issuer | Cisco Systems |
| Delivery | Pearson VUE |
| Duration | 60 minutes |
| Language | English |
| Question count | A range of 30-40 questions per the currently linked blueprint |
| Format | Proctored written exam |
| Policy | Closed-book; subject to Cisco's confidentiality policies |
With 60 minutes and a question range of 30 to 40, you are working with roughly a minute and a half to two minutes per item. That pacing rewards candidates who have internalized design reasoning rather than those who need to reconstruct a design pattern from scratch. Scenario-style questions about why one architecture fits a stated requirement better than another will consume more time than recall questions, so build the habit of reading the requirement statement first and the answer options second.
Because it is a proctored, closed-book exam, you cannot bring notes or reference documentation into the session. Cisco's examination policy page governs identification, check-in and conduct rules, and you should read it before exam day. For specific pricing mechanics, see ENDESIGN Certification Cost 2026; for scheduling windows, see ENDESIGN Exam Dates 2026; and for eligibility questions, see ENDESIGN Requirements 2026.
The 4D Method Behind the Blueprint
The most useful thing to understand about ENDESIGN is its organizing idea. The exam is associated with the field-engineer 4D methodology: Discovery, Design, Demonstrate and Defend. If you look at the domain names, you can see this structure repeated across all three technology areas.
- Discovery: Gathering the customer's business and technical requirements before proposing anything. Questions here test whether you know what to ask and what the answers imply for the architecture.
- Design: Translating those requirements into an architecture, selecting components, and justifying trade-offs.
- Demonstrate: Showing the proposed solution working, typically through a proof of concept or structured demo that maps back to the customer's stated goals.
- Defend: Responding to objections, validating that the design meets requirements, and defending decisions to technical and business stakeholders.
Not every technology area carries all four phases in the blueprint. SD-Access and ISE span discovery through defend in their own ways, while SD-WAN's three listed domains emphasize Discover, Design and Demonstration. Candidates should study the exact headings, covered in the next section, rather than assume symmetry.
Key Takeaway
Study each technology through the 4D lens, not just as a feature list. For every solution, be able to say what you would ask during discovery, what you would design, how you would prove it, and how you would answer a skeptical customer.
Reading the Blueprint: Eleven Domains and Printed Weights
Cisco's official exam-objectives document lists eleven headings. The weights are reproduced here exactly as printed. They add up to 102%, not 100%, and this site preserves them as printed without normalizing. The full breakdown and discussion is in ENDESIGN Exam Domains 2026: Complete Guide to All 11 Content Areas.
| # | Domain | Printed Weight |
|---|---|---|
| 1 | SD-Access Discovery | 6% |
| 2 | SD-Access Design | 12% |
| 3 | SDA Demonstration | 8% |
| 4 | SDA Defend | 8% |
| 5 | SD-WAN: Discover | 8% |
| 6 | SD-WAN: Design | 12% |
| 7 | SD-WAN: Demonstration | 12% |
| 8 | ISE: Discover | 6% |
| 9 | ISE: Design | 12% |
| 10 | ISE: Demonstration | 6% |
| 11 | ISE: Defend | 12% |
Two patterns stand out. First, the highest printed weight is 12%, and it is shared by five domains: SD-Access Design, SD-WAN: Design, SD-WAN: Demonstration, ISE: Design and ISE: Defend. Second, the three technology areas are not equal in total weight. Summing the printed figures, SD-Access carries 34%, SD-WAN carries 32%, and ISE carries 36%. No area is safe to skip, and a weak area will cost you across multiple domains.
SD-Access: Discovery, Design, Demonstration and Defend
The SD-Access block has four domains: SD-Access Discovery (6%), SD-Access Design (12%), SDA Demonstration (8%) and SDA Defend (8%). The design domain is where the weight concentrates, but the discovery domain is small enough to be underestimated, and that is a mistake because discovery questions often determine which design is even appropriate.
SD-Access Discovery and Design
Candidates should understand how a campus fabric is scoped from requirements, and how a design is shaped by what the customer actually needs.
- Fabric roles and how they map to sites, buildings and closets
- Segmentation requirements: macro versus micro, and why a customer's compliance or tenancy needs drive the choice
- Underlay and overlay considerations at the architectural level
- Integration points with identity and policy, which connects directly to the ISE domains
SDA Demonstration and Defend
These domains test whether you can prove a fabric design meets the customer's goals and justify it under questioning.
- What a convincing proof of concept covers, and what it deliberately leaves out
- How to tie observed results back to the customer's stated requirements
- Anticipating objections around migration effort, operational change and policy complexity
For a candidate coming from a traditional three-tier campus background, the shift to thinking in fabrics and policy rather than VLANs and spanning tree is the main conceptual hurdle. Our walkthrough in the ENDESIGN Study Guide 2026 covers how to approach that transition.
SD-WAN: Discover, Design and Demonstration
SD-WAN has the most evenly loaded block relative to its three headings: SD-WAN: Discover (8%), SD-WAN: Design (12%) and SD-WAN: Demonstration (12%). Notably, two of the five 12% domains sit here. The demonstration domain carrying the same weight as design is unusual and signals that Cisco expects field engineers to be able to show a solution, not only specify one.
SD-WAN: Discover and Design
Expect scenario questions that start with a described customer environment and ask what the design should prioritize.
- Translating application, transport and site requirements into a WAN architecture
- Control, management and data plane components, and how they relate in a design
- Transport diversity, resilience and path-selection considerations
- Policy intent: how traffic handling decisions follow from business priorities
SD-WAN: Demonstration
This domain rewards candidates who think about proof, not just architecture.
- What to show a customer to validate resilience, application performance and policy behavior
- Structuring a demonstration so each step maps to a requirement captured during discovery
- Recognizing which results would indicate a design flaw rather than a configuration slip
ISE: Discover, Design, Demonstration and Defend
Cisco Identity Services Engine accounts for the largest total share of the printed blueprint at 36%, split across ISE: Discover (6%), ISE: Design (12%), ISE: Demonstration (6%) and ISE: Defend (12%). Two of the five highest-weighted domains, Design and Defend, are here, so a candidate who treats ISE as a supporting topic to SD-Access will likely underprepare.
ISE: Discover and Design
Design questions reward understanding of how identity and policy decisions shape the whole network.
- Authentication and authorization models and the requirements that drive them
- Deployment architecture, scale and placement of policy nodes
- Profiling, posture and guest access as requirement-driven choices rather than checklist items
- Integration with the network access layer and with fabric segmentation
ISE: Demonstration and Defend
The Defend domain carries double the weight of Demonstration, which tells you where Cisco expects to see depth.
- Justifying policy design to security and network stakeholders with competing priorities
- Explaining trade-offs between strict enforcement and user experience
- Showing that a deployment meets the customer's security and compliance objectives
Naming Quirks You Will See on Cisco Pages
If you cross-check this exam against Cisco's own web pages, you may notice inconsistent labeling. The current Cisco overview page uses "ENDESIGN" in its description but "ENSDENG" in its heading, and the catalog short-code column uses "ENSDESIGN." These are inconsistencies in Cisco's presentation, not different exams. The full field-engineer title and the exam code 500-490 identify the exam unambiguously, so when booking or searching, rely on the code and the title rather than any one abbreviation.
This is also why searches for terms like ENDESIGN meaning or what ENDESIGN certification is can surface unrelated credentials. Always confirm that a source references Cisco, 500-490 and the Advanced Enterprise Networks Architecture Specialization.
Who Hires and Who Should Sit This Exam
The audience is defined by the title: field engineers. In practice that means pre-sales and solutions-oriented network engineers at Cisco partners, integrators and channel organizations, who are expected to lead customer conversations about enterprise campus, WAN and network access architecture. The 4D structure mirrors the way those engagements run, from the first requirements workshop through a proof of concept to the final design defense.
Employers most likely to value it are organizations that sell and deploy Cisco enterprise solutions and need engineers who can be put in front of a customer. For role-oriented detail, see ENDESIGN Jobs. For a discussion of earning potential, see the ENDESIGN Salary Guide, and for a return-on-investment view, see Is the ENDESIGN Certification Worth It?. We deliberately avoid quoting salary numbers here, since no verified figures are part of the supplied exam facts.
If you are weighing difficulty, the candid answer depends heavily on whether you have hands-on exposure to all three technology areas. Our difficulty guide breaks that down, and the pass rate article explains what is and is not publicly known about outcomes.
Sequencing Your Preparation by Domain
Rather than a generic schedule, order your preparation around the blueprint's structure. The goal is to front-load the heavily weighted design domains while the foundational concepts are fresh, then layer in demonstration and defend material, which depends on knowing the designs well.
SD-Access Discovery and Design
- Cover fabric concepts and segmentation, then work the 12% design domain in depth
- Note every point where SD-Access depends on identity policy; you will revisit these in ISE
SD-WAN: Discover, Design, Demonstration
- Spend the most time on design and demonstration, which are both weighted 12%
- Practice mapping a described customer scenario to a requirement list and a proof plan
ISE: Discover, Design, Demonstration, Defend
- Prioritize ISE: Design and ISE: Defend at 12% each
- Connect ISE policy back to the SD-Access segmentation you studied in week 1
SDA Demonstration, SDA Defend and Full Review
- Return to the 8% SDA domains now that identity context is in place
- Run timed sets against the 60-minute limit and review misses by domain
Because the exam is closed-book, you need quick recall of your own condensed notes rather than reliance on documentation. A one-page recap, such as the one in the ENDESIGN Cheat Sheet, is useful for final review, and timed sets from the practice test platform help you calibrate to the question pacing. For scoring details, see ENDESIGN Passing Score, and for training options, see ENDESIGN Training.
Frequently Asked Questions
The exam is 500-490, titled Designing Cisco Enterprise Networks for Field Engineers (ENDESIGN), and it leads to the Advanced Enterprise Networks Architecture Specialization. It is issued by Cisco Systems and delivered through Pearson VUE.
The exam lasts 60 minutes. The currently linked blueprint specifies a range of 30-40 questions. Confirm current details on Cisco's overview page before you schedule.
The highest printed weight is 12%, shared by SD-Access Design, SD-WAN: Design, SD-WAN: Demonstration, ISE: Design and ISE: Defend. Cisco's printed weights total 102%, and we preserve them as printed.
The 4D methodology stands for Discovery, Design, Demonstrate and Defend. It reflects how field engineers run customer engagements, and the domain names across SD-Access, SD-WAN and ISE follow this pattern.
The overview page uses ENDESIGN in its description but ENSDENG in its heading, and the catalog short-code column uses ENSDESIGN. These are labeling inconsistencies; the exam code 500-490 and the full field-engineer title identify the exam.