Free Practice Tests

ISC2 Certification
Practice Tests

Free, exam-aligned practice tests for all five ISC2 certifications — CISSP, CCSP, SSCP, CC, and CGRC. Every test mirrors the real exam pace, domain weights, and question style. No sign-up required.

5 Exams Covered
58 Practice Tests
1,160 Free Questions
100% Free Forever

Choose Your ISC2 Exam

Select the certification you are preparing for and start practicing with free timed tests aligned to the official ISC2 exam blueprints.

CISSP
CISSP Practice Test
The gold standard for experienced security professionals. 5 mixed-set tests + 8 domain-wise tests covering all 8 CBK domains. Each test is 20 questions timed at ~24 minutes — matching the real CAT exam pace of 1.2 minutes per question.
13 Tests · 260 Qs · 8 Domains Start Practice Test →
CCSP
CCSP Practice Test
The benchmark cloud security credential developed by ISC2 and CSA. 5 mixed-set tests + 6 domain-wise tests covering all 6 cloud security domains. Each test is 20 questions timed at ~29 minutes — matching the CAT pace of 1.4 minutes per question.
11 Tests · 220 Qs · 6 Domains Start Practice Test →
SSCP
SSCP Practice Test
The hands-on practitioner credential for operational security professionals. 5 mixed-set tests + 7 domain-wise tests aligned to the September 2024 exam outline. Each test is 20 questions timed at ~22 minutes — matching the CAT pace of 1.1 minutes per question.
12 Tests · 240 Qs · 7 Domains Start Practice Test →
CC
Certified in Cybersecurity (CC) Practice Test
ISC2's entry-level certification with no prerequisites — ideal for career changers and beginners. The exam fee can be free via ISC2's 1MCC program. 5 mixed-set + 5 domain-wise tests. Each test is 20 questions timed at ~24 minutes.
10 Tests · 200 Qs · 5 Domains Start Practice Test →
CGRC
CGRC Practice Test
Formerly the CAP, the CGRC is the leading GRC certification for RMF and compliance professionals. 5 mixed-set tests + 7 domain-wise tests aligned to the June 2024 outline. Each test is 20 questions timed at ~29 minutes — matching the pace of 1.4 minutes per question.
12 Tests · 240 Qs · 7 Domains Start Practice Test →

ISC2 Certifications Compared

A quick reference for exam format, experience requirements, and cost across all five ISC2 certifications.

Certification Level Questions Duration Passing Score Experience Req. Exam Fee (USD)
CC Entry 100 (CAT) 2 hours 700 / 1,000 None $199 (can be free)
SSCP Intermediate 100–125 (CAT) 2 hours 700 / 1,000 1 year $249
CGRC Advanced 125 (fixed) 3 hours 700 / 1,000 2 years $599
CCSP Advanced 100–125 (CAT) 3 hours 700 / 1,000 5 years (1 in cloud) $599
CISSP Expert 100–150 (CAT) 3 hours 700 / 1,000 5 years (2 domains) $749

About ISC2 & Which Certification to Pursue

ISC2 is the world's largest cybersecurity professional organization. Understanding their certification ladder helps you pick the right exam for where you are in your career.

What is ISC2?

ISC2 (International Information System Security Certification Consortium) is a global non-profit with over 600,000 members and certified professionals. Their certifications are ANAB-accredited to ISO 17024, DoD 8140 approved, and among the most respected credentials in cybersecurity worldwide.

ISC2 certifications span entry to expert level, all sharing a common 700/1,000 scaled passing score and a 3-year renewal cycle with Continuing Professional Education (CPE) credits.

Which ISC2 Certification Is Right for You?

Start with CC if you are new to cybersecurity — no prerequisites, can be free via the 1MCC program, and is the clearest on-ramp into the ISC2 ecosystem.

Choose SSCP if you have 1 year of hands-on IT security work and want to validate your operational skills. It is the natural step from CC toward CISSP.

Pursue CGRC if you work in GRC, compliance, or RMF-focused roles — especially in federal or DoD environments.

Pursue CCSP if you are a cloud security architect, engineer, or senior practitioner with 5 years of experience. An active CISSP waives the experience requirement.

Target CISSP if you have 5 years of security experience across 2+ domains and want the most globally recognized expert-level credential in the field.

Exam Domain Weights — All Five ISC2 Certifications

Our domain-wise tests are mapped to these official weights, so your practice reflects actual exam emphasis.

CISSP — 8 Domains (100–150 questions, CAT, 3 hrs)

Security & Risk Management (16%)  |  Asset Security (10%)  |  Security Architecture & Engineering (13%)  |  Communication & Network Security (13%)  |  IAM (13%)  |  Security Assessment & Testing (12%)  |  Security Operations (13%)  |  Software Development Security (10%)

CCSP — 6 Domains (100–125 questions, CAT, 3 hrs)

Cloud Concepts, Architecture & Design (17%)  |  Cloud Data Security (20%)  |  Cloud Platform & Infrastructure Security (17%)  |  Cloud Application Security (17%)  |  Cloud Security Operations (16%)  |  Legal, Risk & Compliance (13%)

SSCP — 7 Domains (100–125 questions, CAT, 2 hrs)

Security Concepts & Practices (16%)  |  Access Controls (15%)  |  Risk Identification, Monitoring & Analysis (15%)  |  Incident Response & Recovery (14%)  |  Cryptography (13%)  |  Network & Communications Security (16%)  |  Systems & Application Security (11%)

CC — 5 Domains (100 questions, CAT, 2 hrs)

Security Principles (26%)  |  BC, DR & Incident Response Concepts (10%)  |  Access Controls Concepts (22%)  |  Network Security (24%)  |  Security Operations (18%)

CGRC — 7 Domains (125 questions, fixed, 3 hrs)

Security & Privacy GRC Program (16%)  |  Scope of the System (10%)  |  Selection & Approval of Controls (14%)  |  Implementation of Controls (17%)  |  Assessment/Audit of Controls (16%)  |  System Compliance (14%)  |  Compliance Maintenance (13%)

Frequently Asked Questions

Common questions about ISC2 certifications and these free practice tests.

What is the difference between CISSP and CCSP?
+
CISSP is a broad expert-level certification covering all aspects of enterprise security management across 8 domains — governance, architecture, operations, networking, IAM, and more. CCSP is a specialist certification focused entirely on cloud security across 6 domains. Both require 5 years of experience, but an active CISSP can substitute for the full CCSP experience requirement. Many professionals hold both: CISSP for enterprise-wide security credibility and CCSP to demonstrate cloud security specialization.
Is the ISC2 CC certification really free?
+
Through ISC2's One Million Certified in Cybersecurity (1MCC) initiative, eligible candidates receive free self-paced training and one free exam attempt ($199 value). To qualify, you must not already hold an ISC2 certification. If you pass, you pay a $50 Annual Maintenance Fee each year to keep the certification active. Retake attempts, if needed, are paid at the standard $199 fee.
How many free practice tests are available for each ISC2 exam?
+
CISSP: 13 tests (5 mixed + 8 domain-wise), 260 questions. CCSP: 11 tests (5 mixed + 6 domain-wise), 220 questions. SSCP: 12 tests (5 mixed + 7 domain-wise), 240 questions. CC: 10 tests (5 mixed + 5 domain-wise), 200 questions. CGRC: 12 tests (5 mixed + 7 domain-wise), 240 questions. All are completely free — no login or subscription required.
What is Computerized Adaptive Testing (CAT) and which ISC2 exams use it?
+
CAT dynamically adjusts question difficulty based on your answers in real time. Correct answers lead to harder questions; incorrect answers lead to slightly easier ones. The algorithm ends the exam once it has enough statistical confidence in a pass or fail decision — which is why the CISSP can end at 100 questions or run to 150. As of October 2025, the CISSP, CCSP, SSCP, and CC all use CAT format for English-language exams. The CGRC uses a fixed-format exam of 125 questions. Critically, CAT exams do not allow back-navigation — once you submit an answer, it is final.
Can I take the CISSP without 5 years of experience?
+
Yes — you can sit for and pass the CISSP exam without the experience requirement. You will then earn the Associate of ISC2 designation and have 6 years to accumulate the required 5 years of paid work experience across at least 2 of the 8 CISSP domains. A 4-year college degree or an approved credential can waive 1 year of the experience requirement. Once you have the experience, you submit an endorsement from an active ISC2-certified professional to complete certification.
What is the CGRC and who is it for?
+
The CGRC (Certified in Governance, Risk and Compliance) is the rebranded successor to the CAP (Certified Authorization Professional), updated in February 2023 to reflect its expanded global scope. It is the leading ISC2 credential for professionals working in GRC, compliance, and risk management roles — particularly those involved in the NIST Risk Management Framework (RMF). It is especially valued in U.S. federal, DoD, and defense contractor environments where RMF expertise is a baseline requirement. The exam covers 7 domains across the full RMF lifecycle: governance, categorization, control selection, implementation, assessment, authorization, and monitoring.

Start Practicing for Free — Right Now

No account. No payment. Pick your ISC2 exam and begin immediately.

Authors

  • Security Practice Test Editorial Team

    Security Practice Test Editorial Team is the expert content team at SecurityPracticeTest.com dedicated to producing authoritative cybersecurity certification exam-prep resources. We create comprehensive practice tests, study materials, and exam-focused content for top security certifications including CompTIA Security+, SecurityX, PenTest+, CISSP, CCSP, SSCP, Certified in Cybersecurity (CC), CGRC, CISM, SC-900, SC-200, AZ-500, AWS Certified Security - Specialty, Professional Cloud Security Engineer, OSCP+, GIAC certifications, CREST certifications, Check Point, Cisco, Fortinet, and Palo Alto Networks exams. Our content is developed through careful review of official exam objectives, cybersecurity knowledge domains, and practical job-relevant concepts to help learners build confidence, strengthen understanding, and prepare effectively for certification success.

  • Sudhanshu Thakur - Reviewer

    Enterprise Technology and Digital Transformation Professional with 18+ years of experience in enterprise software, SaaS, industrial automation, and business consulting. Formerly associated with Rockwell Automation, Tech Mahindra, Emerson, ABB, L&T Infotech, and Hewlett Packard Enterprise.