- The 500-490 blueprint lists 11 headings across three technologies: SD-Access, SD-WAN, and Cisco ISE.
- Cisco's printed weights total 102%, not 100%, and should be read exactly as published.
- Five domains share the top printed weight of 12%: SD-Access Design, SD-WAN Design, SD-WAN Demonstration, ISE Design, and ISE Defend.
- The exam runs 60 minutes with a published range of 30-40 questions, delivered through Pearson VUE.
How the 500-490 Blueprint Is Built
Designing Cisco Enterprise Networks for Field Engineers (ENDESIGN), exam code 500-490, is the exam tied to the Advanced Enterprise Networks Architecture Specialization. Unlike many Cisco exams that organize objectives by protocol family, this blueprint is organized by technology plus engagement phase. You will see three technology tracks, SD-Access, SD-WAN, and Identity Services Engine (ISE), each broken into headings that mirror how a field engineer actually works with a customer.
That structure matters because it tells you what kind of knowledge is being tested. Cisco's official exam-objectives document, a two-page PDF, lists eleven headings. A heading such as "SD-WAN: Demonstration" is not asking you to recite feature lists. It is asking whether you can show a customer that the design works. If you are new to the credential itself, start with What Is ENDESIGN Certification? for background, then return here for the domain-level detail.
All 11 Domains and Their Printed Weights
Here is the complete blueprint exactly as Cisco prints it. Note that the weights add up to 102%. Cisco's document does not normalize them to 100, and neither should you. Treat the numbers as relative emphasis rather than precise question counts.
| # | Domain | Technology | Printed Weight |
|---|---|---|---|
| 1 | SD-Access Discovery | SD-Access | 6% |
| 2 | SD-Access Design | SD-Access | 12% |
| 3 | SDA Demonstration | SD-Access | 8% |
| 4 | SDA Defend | SD-Access | 8% |
| 5 | SD-WAN: Discover | SD-WAN | 8% |
| 6 | SD-WAN: Design | SD-WAN | 12% |
| 7 | SD-WAN: Demonstration | SD-WAN | 12% |
| 8 | ISE: Discover | ISE | 6% |
| 9 | ISE: Design | ISE | 12% |
| 10 | ISE: Demonstration | ISE | 6% |
| 11 | ISE: Defend | ISE | 12% |
Two patterns jump out. First, five domains tie at 12%: SD-Access Design, SD-WAN: Design, SD-WAN: Demonstration, ISE: Design, and ISE: Defend. Second, the two lightest areas, SD-Access Discovery and ISE: Discover (plus ISE: Demonstration), sit at 6%. Discovery content is lighter on weight, but it feeds every later domain, so skipping it is a false economy.
SD-Access Domains (1-4)
The SD-Access track totals 34% of the printed weight across four headings. It follows the full lifecycle: understand the customer's wired and wireless campus, design the fabric, prove it, and then defend the choices.
Domain 1: SD-Access Discovery (6%)
Discovery is about gathering the facts a fabric design depends on before any architecture is drawn.
- Assessing the existing campus topology, switching platforms, and wireless footprint
- Identifying customer drivers such as segmentation needs, operational simplicity, and policy consistency
- Recognizing constraints that make a fabric deployment easier or harder
Domain 2: SD-Access Design (12%)
One of the five heaviest headings. Expect scenario-style questions where you choose design elements that fit stated requirements.
- Fabric site structure and the roles devices play within it
- Underlay and overlay design considerations
- Virtual networks and group-based segmentation planning
- Fabric wireless integration and border connectivity to the rest of the enterprise
Domain 3: SDA Demonstration (8%)
Demonstration questions test whether you know how to prove a design to a customer.
- Which capabilities best illustrate value in a proof of concept
- How to show segmentation and policy behavior in a way stakeholders can follow
Domain 4: SDA Defend (8%)
Defend is the justification phase: why this design, and why not the alternative a customer proposes.
- Responding to objections about complexity, cost, and migration risk
- Tying design decisions back to the requirements captured during discovery
SD-WAN Domains (5-7)
SD-WAN has three headings totaling 32%. Notice the shape: Discover is 8%, but Design and Demonstration are both 12%. This is the track where proving the design carries the same weight as creating it.
Domain 5: SD-WAN: Discover (8%)
Understanding the customer's current WAN before proposing a replacement or overlay.
- Existing transport mix, branch profiles, and application behavior
- Business goals such as cloud access, transport cost, and branch agility
Domain 6: SD-WAN: Design (12%)
Design questions focus on turning discovered requirements into an architecture.
- Controller and edge roles within the solution
- Transport and connectivity choices across sites
- Policy design for application treatment and path selection
- Resiliency and scale considerations across branches and data centers
Domain 7: SD-WAN: Demonstration (12%)
This is the highest-weighted demonstration heading in the blueprint, matching SD-WAN Design at 12%.
- Choosing demonstration scenarios that show application-aware behavior and operational visibility
- Communicating results in terms the customer's business stakeholders care about
ISE Domains (8-11)
The Identity Services Engine track has four headings totaling 36%, the largest of the three technology groups. It also contains two of the five 12% domains: ISE: Design and ISE: Defend.
Domain 8: ISE: Discover (6%)
Establishing what the customer needs from network access control.
- Current authentication methods and endpoint types on the network
- Compliance, guest access, and device visibility requirements
Domain 9: ISE: Design (12%)
Architecture decisions for policy and access control.
- Deployment model and node role planning
- Authentication and authorization policy structure
- Integration with the network infrastructure that enforces policy
- Scalability and high-availability considerations
Domain 10: ISE: Demonstration (6%)
Showing the customer how identity-based access behaves in practice.
- Which use cases make the value of policy-based access tangible
Domain 11: ISE: Defend (12%)
Defending an ISE design is heavily weighted, so expect questions about justifying choices under challenge.
- Handling objections around user impact, rollout phasing, and operational overhead
- Connecting design choices to the discovered requirements
For a candid look at how all this weight distribution translates into effort, see How Hard Is the ENDESIGN Exam?
Reading the Blueprint Through the 4D Method
Cisco associates this specialization with the field-engineer 4D methodology: Discovery, Design, Demonstrate and Defend. Once you see it, the blueprint reads as a grid: three technologies on one axis, the 4D phases on the other. Not every technology gets every phase as its own heading (SD-WAN has no separate Defend heading, and ISE has Demonstration and Defend as separate items), but the logic holds.
| 4D Phase | Headings That Reflect It | What the Question Tests |
|---|---|---|
| Discovery | SD-Access Discovery, SD-WAN: Discover, ISE: Discover | Asking the right questions and capturing requirements |
| Design | SD-Access Design, SD-WAN: Design, ISE: Design | Mapping requirements to architecture choices |
| Demonstrate | SDA Demonstration, SD-WAN: Demonstration, ISE: Demonstration | Proving the design to the customer |
| Defend | SDA Defend, ISE: Defend | Justifying decisions and answering objections |
Key Takeaway
Study each technology as a story with four chapters, not as a pile of features. When you read about a capability, ask what customer need it answers, how you would design for it, how you would show it, and how you would defend it. That framing mirrors how the blueprint itself is organized.
Exam Format and Registration Mechanics
The 500-490 is a proctored written exam delivered through Pearson VUE in English. You get 60 minutes, and the currently linked blueprint specifies a range of 30-40 questions. That is a short exam with a tight clock, so you are working at roughly a couple of minutes or less per question. Scenario wording can be dense, so practice reading a requirement set quickly and identifying the one detail that decides the answer.
The exam falls under Cisco's closed-book and confidentiality policies, which means no reference materials and no sharing of exam content. Review Cisco's examination policy page before test day so nothing about identification or conduct surprises you. For current pricing, see ENDESIGN Certification Cost, and for scheduling logistics check ENDESIGN Exam Dates. Eligibility specifics are covered in ENDESIGN Requirements. For the scoring threshold, read ENDESIGN Passing Score rather than relying on forum guesses.
Sequencing Your Study by Domain
A domain-driven schedule works better than studying technology by technology in isolation, because the heavy 12% headings cluster in Design and Defend/Demonstration phases. One sensible sequence for a six-week plan:
Discovery foundations across all three tracks
- Cover SD-Access Discovery, SD-WAN: Discover, and ISE: Discover together (6%, 8%, 6%)
- Build a requirements-gathering checklist for each technology
The three Design domains
- SD-Access Design, SD-WAN: Design, and ISE: Design are all 12%
- Practice choosing architectures from written customer requirements
Demonstration domains
- SDA Demonstration (8%), SD-WAN: Demonstration (12%), ISE: Demonstration (6%)
- Prioritize SD-WAN Demonstration because of its 12% weight
Defend domains
- SDA Defend (8%) and ISE: Defend (12%)
- Rehearse answering objections using your discovery notes
Timed mixed practice
- Run 30-40 question sets against a 60-minute clock
- Revisit your weakest 12% domain first
For a fuller plan, see the ENDESIGN Study Guide, and keep the ENDESIGN Cheat Sheet handy for last-day review. Timed practice questions are available on the 500-490 practice test site, which is the best way to rehearse the 60-minute pace.
Who Values This Credential
This specialization is aimed at field engineers: the people who sit with customers, assess their environments, propose architectures, run proofs of concept, and defend recommendations. Employers most likely to care include Cisco partners and resellers, systems integrators, and managed-service providers that sell and deploy campus, WAN, and access-control solutions. Titles that fit the profile include systems engineer, field engineer, consulting engineer, and solutions architect on enterprise networking teams.
Because the exam spans SD-Access, SD-WAN, and ISE, it signals breadth across the three technologies that dominate modern Cisco enterprise engagements. To weigh the career side, read ENDESIGN Jobs, the ENDESIGN Salary Guide, and Is the ENDESIGN Certification Worth It? Since exact pass-rate figures are not something to guess at, the honest treatment lives in ENDESIGN Pass Rate.
If you are still orienting yourself, the explainers What Is ENDESIGN? and What Does ENDESIGN Stand For? cover the basics, and the ENDESIGN Training overview outlines preparation resources. When you are ready to test yourself against realistic scenarios, head to the ENDESIGN Exam Prep practice tests.
Frequently Asked Questions
Cisco's published objectives list eleven headings: four for SD-Access, three for SD-WAN, and four for ISE. Each heading carries a printed weight.
That is how Cisco prints them in the official objectives document. Treat the numbers as relative emphasis and do not try to normalize them to 100%.
Five headings tie at 12%: SD-Access Design, SD-WAN: Design, SD-WAN: Demonstration, ISE: Design, and ISE: Defend. Together they account for 60% of the printed weight.
The exam is 60 minutes with a published range of 30-40 questions, delivered in English through Pearson VUE as a proctored written exam.
The specialization is associated with the field-engineer 4D method: Discovery, Design, Demonstrate and Defend. The domain names follow those phases, so studying each technology through all four lenses matches how the blueprint is organized.