ISC2 CISSP Practice Test
Use the five free mixed sets to find the pattern in your misses, then drill any weak domain with a focused 20-question test. Each free test runs on a timer. When you need a longer benchmark, the full-length series gives you fixed 100-question, 180-minute papers across all eight CISSP domains.
Mixed set — CISSP practice tests
Twenty questions spread across the eight domains. Use a mixed set when you want a quick read on where your judgment is slipping before you spend another evening revising the wrong topic.
Domain-wise — CISSP practice tests
A mixed set tells you where the gap is. These eight focused tests let you work on that domain without waiting for it to appear again in a broad set.
Twenty questions finds the weak spot.
One hundred shows whether it holds for three hours.
The free tests are built for diagnosis. The full-length series is the next step when you want a repeatable endurance benchmark: 100 questions, 180 minutes, every domain represented at the current CISSP weights.
| Free tests above | Full-length tests | |
|---|---|---|
| Questions | 20 | 100 |
| Time limit | ~24 minutes | 180 minutes |
| Coverage | Mixed set or one CISSP domain | All 8 domains at 16/10/13/13/13/12/13/10 |
| Score you get | Short-test result | Estimated 0–1000 practice score against the 700 benchmark |
| Per-domain breakdown | — | Eight-domain breakdown |
| Two-answer questions | — | Included and clearly marked |
| Exam conditions | Timed | Flagging, review screen, auto-submit at zero, focus-loss tracking |
| Report | — | Score plus domain-level result |
| Number available | 13 free tests | 10 full-length tests · 1,000 questions |
| Price | Free | From $4.49₹159£3.69€4.29 per test |
How to use the CISSP practice tests
Use the short tests to decide what deserves study time. Save the three-hour papers for the point where you need to test endurance, decision quality and whether the same weak domain keeps coming back.
Benchmark
Take two mixed sets before a heavy revision block. Don't chase one bad question. Look for a domain or decision pattern that repeats.
Start with Practice Test 1 →Drill the gap
Move to the matching domain test. Review the objective behind each miss, then come back to a different mixed set and see whether the mistake survives.
Open Domain 1 →Run the three-hour benchmark
Once the short sets stop exposing obvious gaps, sit a fixed 100-question paper. The longer run makes hesitation and weak judgment much harder to hide.
Get Full-Length Tests →About the ISC2 CISSP exam
The current CISSP exam outline took effect on April 15, 2024. ISC2 now delivers CISSP as Computerized Adaptive Testing in every listed exam language.
Exam format
Delivery: Computerized Adaptive Testing (CAT).
Items: 100–150.
Time: Up to 3 hours.
Item format: Multiple choice and advanced item types.
Passing standard: 700 out of 1000 points.
Languages: Chinese, English, German, Japanese and Spanish.
U.S. / Asia-Pacific exam fee: $749.
Experience, retakes and maintenance
Experience: Five years of cumulative work experience in at least two of the eight CISSP domains.
One-year waiver: An eligible post-secondary degree in computer science, IT or a related field, or an approved credential, can satisfy up to one year.
Associate path: Pass first, then use the Associate of ISC2 route while you build the required experience. The window is six years.
Endorsement: Complete the certification application and endorsement process within nine months of passing.
Retakes: 30 test-free days after the first attempt, 60 after the second, then 90 after the third and later attempts. Maximum four attempts in 12 months.
Maintenance: 120 CPE credits over three years and a $135 annual maintenance fee.
CISSP domain weights
Security and Risk Management is the largest domain at 16%. The current weighting has been in force since April 15, 2024.
| Domain | Topic | ISC2 weight |
|---|---|---|
| Domain 1 | Security and Risk Management | 16% |
| Domain 2 | Asset Security | 10% |
| Domain 3 | Security Architecture and Engineering | 13% |
| Domain 4 | Communication and Network Security | 13% |
| Domain 5 | Identity and Access Management (IAM) | 13% |
| Domain 6 | Security Assessment and Testing | 12% |
| Domain 7 | Security Operations | 13% |
| Domain 8 | Software Development Security | 10% |
How our CISSP practice tests are written
Current outline first. The question sets are organized around the eight-domain CISSP outline effective April 15, 2024. Domain weight matters because it changes how often a topic should show up in broad practice.
Judgment over vocabulary. CISSP questions often put several defensible actions in front of you and ask for the BEST, FIRST, MOST or GREATEST response. The useful practice is deciding which answer fits the business requirement, authority level and risk in the stem.
Short tests for diagnosis. The five mixed sets and eight domain tests are 20 questions each. A ~24-minute timer matches the pace required if the live CAT reaches its 150-item maximum. That makes the short sets useful for quick, repeated checks.
Fixed forms for the long benchmark. The CISSP exam adapts question by question. The full-length practice series keeps each paper at 100 questions and 180 minutes so you can compare one attempt with the next without the form length moving underneath you.
CISSP exam preparation tips
Study strategy
Start with evidence, not a study calendar. Take a mixed set first. If Domain 5 keeps hurting you, spend the next block on IAM instead of rereading a comfortable chapter in Domain 1.
Give Domain 1 its weight. Security and Risk Management is 16% of the current outline, the largest single domain. Governance, ethics, risk treatment and business impact need to be automatic enough that a technical distractor doesn't pull you away from the management answer.
Review why the runner-up lost. On CISSP, the second-best option is often technically sound. The learning happens in the reason it loses: wrong owner, wrong sequence, too tactical, or it solves a different risk than the stem asked about.
Test-taking strategy
Commit before you move on. CAT does not allow item review. Once you finalize an answer, you cannot return to it or change it.
Don't force a fixed seconds-per-question rule. The exam can end anywhere from 100 to 150 items inside three hours. Keep moving, but spend enough time to understand what the question is actually asking before you commit.
Separate possible from best. When two answers work technically, ask which one fits the role in the scenario, reduces the stated risk and respects governance. That is usually where the question is decided.
Frequently asked CISSP questions
The current CISSP CAT contains 100 to 150 items and has a maximum testing time of three hours. The exam can stop after the minimum once the CAT algorithm has enough statistical confidence, or continue toward the maximum.
ISC2 sets the passing standard at 700 out of 1000 points. Candidates do not receive a numerical exam score on the pass/fail report. Candidates who fail receive proficiency information by domain.
Yes. The ISC2 CISSP Full Length Practice Test series contains ten fixed 100-question papers, each with a 180-minute timer, the current eight-domain distribution, clearly marked two-answer questions, an estimated 0–1000 practice score and an eight-domain breakdown.
Yes. The five mixed sets and eight domain-wise tests on this page are free. Each contains 20 questions.
No. ISC2 does not permit item review on the CAT exam. Once you finalize an answer and move forward, you cannot review or change that response.
ISC2 lists the standard CISSP exam fee at U.S. $749 for the Americas, Asia Pacific and other regions priced in U.S. dollars. ISC2 publishes separate GBP and EUR pricing for the United Kingdom and EMEA.
After the first attempt, you must wait 30 test-free days. After the second, the wait is 60 test-free days from the most recent attempt. After the third and later attempts, it is 90 test-free days. ISC2 allows up to four attempts for the same certification within a 12-month period.
Full CISSP certification requires five years of cumulative work experience in at least two of the eight domains. Up to one year can be satisfied by an eligible post-secondary degree in computer science, IT or a related field, or by an approved credential. Candidates who pass before meeting the experience requirement can use the Associate of ISC2 pathway and have six years to earn the required experience.
Use the short tests to find the gap. Use the long ones to test the fix.
Start with a free 20-question mixed set. When you are ready for a three-hour benchmark, move to a 100-question full-length paper and compare the domain breakdown with your revision plan.
