ENDESIGN logo
Focused certification exam prep
Start practice

What Is ENDESIGN?

TL;DR
  • ENDESIGN is Cisco's exam 500-490, Designing Cisco Enterprise Networks for Field Engineers, delivered through Pearson VUE in 60 minutes.
  • The blueprint lists 11 headings across SD-Access, SD-WAN and ISE, each following the Discover, Design, Demonstrate, Defend pattern.
  • Five domains share the highest printed weight of 12%: SD-Access Design, SD-WAN Design, SD-WAN Demonstration, ISE Design and ISE Defend.
  • Cisco's printed weights total 102%, so treat them as relative emphasis rather than exact question counts.

What ENDESIGN Actually Is

ENDESIGN is the short name for Designing Cisco Enterprise Networks for Field Engineers (ENDESIGN), the proctored written exam with the code 500-490. It is associated with Cisco's Advanced Enterprise Networks Architecture Specialization and is aimed at field engineers: the people who sit with customers, assess their environments, propose architectures, prove those architectures work, and then defend the design choices under scrutiny.

That last point is what separates this exam from a pure configuration test. The blueprint is organized around the lifecycle of a customer engagement rather than around feature lists. A candidate is expected to know what questions to ask during discovery, how to translate answers into a sound design, how to demonstrate the result, and how to justify decisions when a customer challenges them.

If you want the broader certification context, the overview at ENDESIGN Certification and the explainer What Is ENDESIGN Certification? cover how the credential fits into Cisco's catalog.

Identity and Naming: Avoiding Confusion

The acronym causes real confusion, so it is worth being precise. On this site, ENDESIGN refers only to Cisco exam 500-490. Other credentials elsewhere in the industry use similar shorthand, and their details do not apply here. Cisco's own materials are also slightly inconsistent: the current overview page uses ENDESIGN in its description but ENSDENG in its heading, and the catalog's short-code column shows ENSDESIGN. All of these point to the same Cisco field-engineer design exam.

If you are searching for terminology help, these short explainers address the naming question directly: What Does ENDESIGN Stand For? and ENDESIGN Meaning.

Verify the exam code before you book: When scheduling, confirm the code reads 500-490 and the title references Designing Cisco Enterprise Networks for Field Engineers. Because Cisco's catalog uses several short names for the same offering, the exam code and full title are the reliable identifiers.

Exam Format and Logistics

The hard facts about delivery are straightforward:

AttributeENDESIGN (500-490)
IssuerCisco Systems
DeliveryPearson VUE, proctored
Duration60 minutes
LanguageEnglish
Question countThe currently linked blueprint specifies a range of 30-40 questions
RulesClosed-book, under Cisco's confidentiality policies

Sixty minutes for 30 to 40 questions leaves a modest amount of time per item. That pacing rewards candidates who recognize design patterns quickly rather than those who must derive an answer from first principles. Cisco does not publish the detailed question mix in the blueprint, so avoid assuming a particular ratio of formats. Practice reading scenario-style prompts efficiently and extracting the decision criteria buried in them.

For a candid look at how demanding this format feels, see How Hard Is the ENDESIGN Exam?. For score thresholds, the dedicated ENDESIGN Passing Score article is the right reference, since Cisco's blueprint document itself is a two-page objectives list and does not state a cut score.

The 4D Method Behind the Blueprint

The most useful way to understand ENDESIGN is through its field-engineer methodology: Discovery, Design, Demonstrate and Defend. The eleven blueprint headings are built from these four phases applied to three technology areas.

  • Discovery (labeled "Discover" or "Discovery" in the blueprint): gathering requirements, understanding the customer's current state, and identifying business and technical drivers.
  • Design: selecting architecture, components and policies that satisfy those requirements.
  • Demonstrate: showing the solution working, typically through proof-of-concept thinking, validation and presenting outcomes.
  • Defend: justifying design decisions, handling objections, and explaining trade-offs and security posture.

Notice that not every technology area has all four phases in the printed blueprint. SD-Access has Discovery, Design, Demonstration and Defend. SD-WAN lists Discover, Design and Demonstration. ISE lists Discover, Design, Demonstration and Defend. Knowing which phases appear for which technology helps you scope your preparation accurately.

The 11 Domains and Their Printed Weights

Cisco's two-page objectives document lists eleven headings. The weights below are reproduced exactly as printed. They total 102%, which is a quirk of the published document; they are intentionally not normalized here.

#DomainPrinted Weight
1SD-Access Discovery6%
2SD-Access Design12%
3SDA Demonstration8%
4SDA Defend8%
5SD-WAN: Discover8%
6SD-WAN: Design12%
7SD-WAN: Demonstration12%
8ISE: Discover6%
9ISE: Design12%
10ISE: Demonstration6%
11ISE: Defend12%

The highest printed weight is 12%, and five domains share it: SD-Access Design, SD-WAN: Design, SD-WAN: Demonstration, ISE: Design and ISE: Defend. Together those five account for the bulk of the exam's emphasis, so they deserve disproportionate study time. A full walkthrough of each heading lives in ENDESIGN Exam Domains: Complete Guide to All 11 Content Areas.

Reading the 102% total: Because the printed percentages add up to more than 100, do not convert them into exact question counts. Use them as a relative priority signal: a 12% domain matters roughly twice as much as a 6% domain, and that is all the document supports.

Three Technology Pillars to Master

The eleven headings collapse into three pillars: software-defined access in the campus, software-defined WAN, and identity-based policy with Cisco ISE. Each pillar is tested through the four-phase lens above.

Pillar 1: SD-Access (Domains 1 to 4)

SD-Access Discovery, Design, Demonstration and Defend

This pillar covers Cisco's fabric-based campus approach. A field engineer must be able to assess whether a customer's campus is a good fit, design the fabric, demonstrate it, and defend the architecture.

  • Discovery questions: existing campus topology, segmentation requirements, wired and wireless scale, and operational readiness for automation.
  • Design reasoning: fabric roles, overlay and underlay thinking, and how segmentation maps to business groups. Design carries the 12% weight, the heaviest in this pillar.
  • Demonstration: what a credible proof of concept should show and how to present outcomes to stakeholders (8%).
  • Defend: justifying architectural choices and addressing security and operational objections (8%).

Pillar 2: SD-WAN (Domains 5 to 7)

SD-WAN Discover, Design and Demonstration

The WAN pillar is notable because two of its three headings carry the maximum 12% weight. Design and Demonstration together make it the most heavily emphasized technology area per heading.

  • Discover (8%): understanding site types, transport options, application requirements and existing WAN pain points.
  • Design (12%): topology choices, transport diversity, policy intent and how to map application needs to path selection.
  • Demonstration (12%): proving resilience, application-aware behavior and operational visibility, and communicating the value in business terms.

Note that the printed blueprint does not list a separate Defend heading for SD-WAN, so Demonstration is where much of the justification skill is exercised.

Pillar 3: ISE (Domains 8 to 11)

ISE Discover, Design, Demonstration and Defend

Identity Services Engine underpins policy for both access and segmentation. ISE appears in four headings, and two of them, Design and Defend, are at the 12% ceiling.

  • Discover (6%): identifying endpoint types, identity sources, existing authentication posture and compliance goals.
  • Design (12%): policy structure, deployment architecture, and how identity maps to access decisions.
  • Demonstration (6%): showing authentication and authorization outcomes in a way customers can follow.
  • Defend (12%): justifying policy decisions, handling security objections, and explaining trade-offs between strictness and usability.

Because SD-Access and ISE interact closely in real deployments, expect the exam's design thinking to reward candidates who understand how identity drives segmentation rather than treating the technologies as isolated topics.

Who Should Take It and Who Hires for It

ENDESIGN is positioned for field engineers, so its natural audience is professionals whose daily work is customer-facing network architecture. Typical roles include systems engineers, consulting and pre-sales engineers, solutions architects at Cisco partners and integrators, and senior network engineers who regularly scope and propose enterprise designs.

Employers that value this credential tend to be channel partners, managed service providers and large integrators that sell and deliver Cisco enterprise solutions, as well as enterprises with in-house architecture teams modernizing campus, WAN and access control. Because the exam validates design and defense skills rather than device-level troubleshooting, it signals suitability for roles where you present to customers and own the architecture conversation.

For role and market context, see ENDESIGN Jobs, and for earnings discussion, the ENDESIGN Salary Guide. To weigh the investment honestly, read Is the ENDESIGN Certification Worth It?.

Key Takeaway

Think of ENDESIGN as an architect's engagement exam. You are being assessed on whether you can discover, design, prove and defend a Cisco enterprise solution, not on whether you can recite command syntax. Prepare accordingly.

Registration, Fees and Policy Mechanics

ENDESIGN is delivered through Pearson VUE, so scheduling follows the standard Pearson VUE workflow: sign in with your Cisco-linked account, locate exam 500-490, and choose a testing option and time. Because the exam is proctored, expect identity verification and Cisco's closed-book rules, with the confidentiality policies applying to exam content.

Exam fee amounts are not stated in the official objectives document, and Cisco's pricing can differ by region and channel, so confirm the current price at registration rather than relying on third-party figures. Cisco also maintains a channel and partner exam listing and a published examination policy page, both useful for checking current availability and rules before you commit. For a structured look at spend, see ENDESIGN Certification Cost; for eligibility questions, ENDESIGN Requirements; and for scheduling windows, ENDESIGN Exam Dates.

One source-reliability note: the official objectives PDF is a short, two-page document dated 2018 in its copyright line, and Cisco's canonical link to it has at times redirected to a sign-in page. The blueprint described in this article reflects the publicly retrievable issuer document, so always cross-check against the version linked from Cisco's current exam overview before finalizing your plan.

Sequencing Your Preparation by Domain

Generic study routines matter less than allocating time according to the blueprint. Because five domains sit at 12%, the schedule below front-loads the design material, then returns to demonstration and defense skills. It is a template to adapt, not a prescription, and it assumes you already work with Cisco enterprise technologies.

Week 1

Discovery foundations across all three pillars

  • Cover SD-Access Discovery, SD-WAN: Discover and ISE: Discover together.
  • Practice writing the questions you would ask a customer, since these are lower-weighted (6% to 8%) but unlock every later phase.
Week 2

Design depth: SD-Access and SD-WAN

  • Work through SD-Access Design and SD-WAN: Design, both at 12%.
  • Compare how segmentation, topology and policy decisions differ between campus and WAN.
Week 3

ISE design and defense

  • Study ISE: Design and ISE: Defend, both at 12%.
  • Rehearse justifying policy choices and handling security objections.
Week 4

Demonstration and defense, then timed review

  • Cover SD-WAN: Demonstration (12%), SDA Demonstration and SDA Defend (8% each), and ISE: Demonstration (6%).
  • Finish with timed sets to build comfort with 30 to 40 questions in 60 minutes.

For a fuller plan and resource guidance, read the ENDESIGN Study Guide, and keep the ENDESIGN Cheat Sheet handy for last-minute review. If you want structured practice against the domain list above, the ENDESIGN practice tests on the main site map questions to these headings so you can see which of the eleven areas need more attention. For guided learning options, the ENDESIGN Training overview is a good starting point, and you can return to the main practice test site whenever you want to measure readiness.

Frequently Asked Questions

What does ENDESIGN stand for?

On this site it refers to Designing Cisco Enterprise Networks for Field Engineers, Cisco exam 500-490. Cisco's own pages also use the variants ENSDENG and ENSDESIGN for the same offering, so rely on the exam code and full title to be sure.

How long is the ENDESIGN exam and how many questions does it have?

The exam runs 60 minutes, and the currently linked blueprint specifies a range of 30 to 40 questions. It is delivered in English through Pearson VUE as a proctored, closed-book test.

Which ENDESIGN domains carry the most weight?

Five headings share the highest printed weight of 12%: SD-Access Design, SD-WAN: Design, SD-WAN: Demonstration, ISE: Design and ISE: Defend. Cisco's printed weights total 102%, so treat them as relative emphasis.

What is the 4D methodology?

It is the field-engineer approach associated with this exam: Discovery, Design, Demonstrate and Defend. The blueprint applies these phases across SD-Access, SD-WAN and ISE, although SD-WAN's printed headings omit a separate Defend item.

Where can I find the exam pass rate and passing score?

Cisco's objectives document does not publish a pass rate or a cut score. Our articles on the ENDESIGN pass rate and ENDESIGN passing score explain what is and is not publicly known.

Ready to pass your ENDESIGN exam?

Put this into practice with free ENDESIGN questions across every exam domain.