ISC2 Certified in Cybersecurity (CC) Practice Test
Ten free 20-question practice tests for building CC fundamentals, plus a direct route to the current-outline full-length series when you are ready for a two-hour benchmark. The live CC exam is now CAT, runs 100–125 items and uses the September 1, 2026 domain structure.
Mixed-set ISC2 CC practice tests
Five short sets, 20 questions each. Use them to find which concepts are slowing you down before you spend two hours on a full-length paper.
Domain-wise ISC2 CC practice tests
Five focused practice tests, one for each domain in the current ISC2 Certified in Cybersecurity exam outline effective September 1, 2026.
Twenty questions finds the gap.
Two hours shows whether the gap still matters.
The free sets are quick diagnostics. The full-length CC series uses 104 questions in 120 minutes, the current five-domain allocation, 92 single-answer questions and 12 choose-TWO questions on every paper.
| Free practice tests | Full-length practice tests | |
|---|---|---|
| Questions | 20 per test | 104 per test |
| Time limit | ~24 minutes | 120 minutes |
| Coverage | Mixed set or focused topic drill | All five current domains at a fixed 25 / 18 / 21 / 22 / 18 allocation |
| Question formats | Short practice set | 92 single-answer + 12 choose-TWO |
| Practice result | Short diagnostic attempt | Estimated scaled practice score against the 700 benchmark |
| Number available | 10 free tests | 10 full-length tests · 1,040 questions |
| Price | Free | From $2₹99£1.47€1.70 per test |
How to use these CC practice tests
Keep the short sets for diagnosis. Save the two-hour paper for the point where you want a repeatable benchmark across the current outline.
Benchmark
Take two mixed sets before a heavy revision block. Look for the same concept going wrong more than once.
Start with Practice Test 1 →Drill the concept
Use a focused 20-question drill for the topic you missed, then map it back to the current September 2026 domain table below.
Open a focused drill →Run the two-hour benchmark
Once the short sets stop exposing obvious gaps, sit a fixed 104-question paper and see how your decisions hold up across the whole current outline.
Get Full-Length Tests →About the ISC2 Certified in Cybersecurity exam
The current CC Exam Outline took effect on September 1, 2026. It keeps five domains, but governance, IAM, cloud security and incident response now have clearer homes in the blueprint.
What changed in September 2026?
The current outline is the first major CC content refresh since the certification launched in 2022. Security Principles remains Domain 1, while the other four domains were renamed and reorganized. Foundational AI security concepts now appear across the full outline.
The live exam is Computerized Adaptive Testing. It can stop anywhere from 100 to 125 items, and you have two hours. Once you submit an answer, you move forward. There is no back-navigation.
Current exam format
Delivery: Computerized Adaptive Testing (CAT) at Pearson VUE testing centers.
Items: 100–125.
Time: 2 hours.
Item formats: Multiple choice and advanced item types.
Passing standard: 700 out of 1000 points. ISC2 does not report a numerical score to candidates.
Standard exam fee: US$199.
Eligibility and maintenance
Work experience: None required.
One Million CC program: New enrollment closed on May 20, 2026. Candidates who already hold a valid free exam code may still use it by December 31, 2026.
Retakes: 30 test-free days after the first attempt, 60 after the second and 90 after the third and later attempts. Maximum four attempts in 12 months.
Maintenance: 45 CPE credits across the three-year cycle and a US$50 Annual Maintenance Fee each year for CC-only members.
ISC2 CC domain weights — effective September 1, 2026
Security Principles is still the largest domain, but the new outline spreads more weight into governance, IAM, cloud security and incident response than the previous structure did.
| Domain | Current topic | Average weight |
|---|---|---|
| Domain 1 | Security Principles | 24% |
| Domain 2 | Security Governance | 17.3% |
| Domain 3 | Identity And Access Management (IAM) Concepts | 20% |
| Domain 4 | Networking and Cloud Security Concepts | 21.3% |
| Domain 5 | Security Operations and Incident Response | 17.3% |
How our CC practice tests fit the job
Start with fundamentals, then make a decision. CC is entry-level, but the useful questions are not vocabulary flashcards. A good item asks whether you can separate authentication from authorization, choose least privilege over convenience, or recognize which control actually solves the problem in front of you.
The current full-length series uses the September 2026 outline. Every 104-question paper follows a fixed 25 / 18 / 21 / 22 / 18 allocation across the five live domains. That fixed form is deliberate: the real exam is adaptive, while a fixed practice paper gives you something you can compare from one attempt to the next.
The live exam and the practice engine are not the same delivery model. ISC2 uses CAT and can stop between 100 and 125 items. The full-length practice tests are linear, fixed at 104 questions and 120 minutes.
ISC2 CC exam preparation tips
Study strategy
Use the new outline, not the old percentages. Domain 2 is now Security Governance at 17.3%, Domain 3 is IAM Concepts at 20%, Domain 4 now includes cloud security at 21.3%, and Domain 5 includes incident response at 17.3%.
Make the security principles automatic. CIA, AAA, risk, controls, due care, due diligence and ethics feed questions in more than one domain.
Do not skip the newer material. Cloud security, threat intelligence, security testing and foundational AI security are part of the refreshed outline.
Test-taking strategy
Commit before you move. CAT does not let you return to a submitted item. Read the requirement, remove the answer that solves a different problem, then choose.
Do not turn 700 into 70%. ISC2 publishes a scaled passing standard of 700 out of 1000. It does not publish a fixed raw percentage you need correct.
Use the whole two-hour window. The exam can run to 125 items. Practising only at a fixed 100-question pace leaves less room if the CAT continues.
Frequently asked questions
The live exam is a variable-length CAT with 100–125 items and a two-hour time limit.
ISC2 sets the passing standard at 700 out of 1000 points. It is a scaled standard, not a statement that 70% of the questions must be correct. ISC2 does not provide candidates with a numerical exam score.
Security Principles 24%, Security Governance 17.3%, Identity And Access Management (IAM) Concepts 20%, Networking and Cloud Security Concepts 21.3%, and Security Operations and Incident Response 17.3%.
New enrollment in ISC2’s One Million Certified in Cybersecurity program ended on May 20, 2026. Candidates who already received a valid free CC exam code may still schedule and sit that exam by December 31, 2026. The standard CC exam fee is US$199.
No. ISC2 positions CC as an entry-level certification and does not require prior cybersecurity work experience.
After the first attempt, wait 30 test-free days. After the second, wait 60 test-free days from the most recent attempt. After the third and later attempts, wait 90 test-free days. ISC2 allows up to four attempts for the same certification in a 12-month period.
CC holders need 45 CPE credits across the three-year certification cycle. ISC2 charges a US$50 Annual Maintenance Fee each year for members who hold only the CC certification.
Yes. The ISC2 Certified in Cybersecurity (CC) Full-Length Practice Tests use 104 questions in 120 minutes. Every paper follows the current 25 / 18 / 21 / 22 / 18 domain allocation, includes 12 choose-TWO questions and returns an estimated scaled practice score against the 700 benchmark. There are ten full-length tests, 1,040 questions in total, from $2₹99£1.47€1.70 per test.
Yes. The five mixed sets and five focused topic drills linked on this page are free.
Start short. Go full-length when the short set stops teaching you anything new.
Use a free 20-question set to find the concept that needs work. Then run a 104-question, 120-minute paper across the current September 2026 CC outline.
