Learn mode
Learn as you go
Choose an answer, reveal the key, and review available explanations, citations and candidate context.
25 questions free
Start guided practiceThe most widely recognised senior security certification: eight domains spanning risk management, asset and architecture security, networks, identity, testing, operations and software security.
ISC2 does not publish numeric exam codes — CISSP is the common abbreviation.
ISC2 Certified Information Systems Security Professional is ISC2's expert-level cybersecurity certification, referred to across the industry by the shorthand CISSP. The exam runs for 4 hours and presents up to 150 questions, with a pass mark of 700 / 1000 (scaled, adaptive). It costs US$749 at the standard rate.
ISC2 publishes the syllabus as 8 weighted domains. Security and Risk Management carries the most weight at 16%, and the three largest domains together account for roughly 42% of the scored content — worth knowing before you decide where study time goes.
CISSP is adaptive, so the number of questions you see depends on how you answer. It is also deliberately management-oriented — the expected answer is usually the one a security leader would give, not the most technically clever option.
Confirm these details on the official ISC2 page before booking — vendors adjust format and pricing without notice.
Some forms include unscored trial questions
Standard rate, before local taxes
The published exam guide for CISSP, in the vendor's own order.
01Security and Risk Management
16%02Asset Security
10%03Security Architecture and Engineering
13%04Communication and Network Security
13%05Identity and Access Management
13%06Security Assessment and Testing
12%07Security Operations
13%08Software Development Security
10%Five years of cumulative paid work experience across two or more domains, with one year waivable by degree or approved certification.
Expert level — The highest tier, usually requiring a prerequisite certification.
Preview 25 supported questions before unlocking the 483-question CISSP bank.
Community-contributedCompiled from publicly posted community exam discussions. Contributed by third parties rather than written here, so accuracy varies and most items carry no explanation. Progress and bookmarks stay in this browser.
Answer support: 113 explanations, 483 questions with candidate context and 13 questions with direct citations. Bank updated .
Choose an answer, reveal the key, and review available explanations, citations and candidate context.
25 questions free
Start guided practiceKeep answers hidden on the clock and review every miss only after you finish the public sample.
Free sample mock
Open timed mockWant the complete 483-question bank?
One Exam Pass unlocks this selected bank for 12 months with no renewal.
Compiled from exam discussions posted publicly by other people on ExamTopics. Copyright in each contribution rests with its original author; it is reproduced here for study. Not verified by us — most items carry no explanation. To request removal, see our content policy.
ISC2 lists up to 150 questions, to be completed in 4 hours. Question counts can vary slightly between exam forms, and unscored trial questions are sometimes included.
700 / 1000 (scaled, adaptive). Confirm the current figure on the official exam page before booking, as vendors adjust cut scores when an exam form is refreshed.
The standard price is US$749. Local pricing, taxes and any retake policy vary by region, so check the official page for the figure that applies to you.
Five years of cumulative paid work experience across two or more domains, with one year waivable by degree or approved certification.
The exam guide covers Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security and Identity and Access Management, plus 3 further domains. The full weighted breakdown is listed above.
Yes — this exam has 483 practice questions available here, each with the correct answer marked. They are community-contributed, compiled from exam discussions posted publicly by other people rather than written here, and most do not carry an explanation.