ISC2 Certified in Cybersecurity (CC)
Unlimited ISC2 CC practice exam retakes, each drawn fresh from a question pool weighted by the official exam domains — security principles, business continuity/DR & incident response, access controls concepts, network security, and security operations.
Exam mode Default
120-minute timer, flag for review and a review screen before you submit — just like test day.
Practice mode
See the correct answer, the exam domain and a full explanation after every question.
What you get
- A 195-question pool — every attempt draws 65 fresh questions weighted by the official exam domains
- Unlimited retakes, lifetime access
- Score report by exam domain, with your score trend over time
- Answer review with explanations and reference links
- Original, blueprint-aligned questions — never exam dumps
Ready to sit the real CC exam?
Get the official exam voucher and this practice exam is included free (worth US$20.00).
Exam domains
Every attempt draws questions in these official proportions. Open a domain to see the subtopics it covers.
Security Principles26%
- Understand cybersecurity concepts: CIA, AAA, non-repudiation and privacy
- Understand risk management concepts
- Understand governance concepts: regulations, frameworks, policies and standards
- Understand technical, administrative and physical cybersecurity controls
- Maintain professional and ethical conduct, including the ISC2 Code of Ethics
- Plan Governance, Risk, and Compliance (GRC)
- Measure cybersecurity effectiveness with key metrics, KRIs and dashboards
Business Continuity, Disaster Recovery and Incident Response10%
- Understand redundancy through Business Continuity (BC)
- Understand redundancy through Disaster Recovery (DR)
- Understand Incident Response (IR) and implementing an Incident Response Plan (IRP)
- Run Incident Response exercises such as testing and tabletops
Access Controls Concepts22%
- Understand identity life cycle management: roles, provisioning, review, deprovisioning
- Understand logical access controls
- Apply the Principle of Least Privilege (PoLP) and Separation of Duties (SoD)
- Understand access control models
Network Security24%
- Understand network security: OSI and TCP/IP models, IPv4/IPv6, VPN, firewalls, wireless
- Understand network security architecture: segmentation, defense in depth and Zero Trust
- Understand cloud security: service and deployment models and the shared security model
Security Operations18%
- Understand data security: data handling and encryption
- Understand security operations: logging, monitoring, event triage and threat intelligence
- Understand asset protection: asset lifecycle, configuration and change management
- Understand security testing: readiness, application and physical penetration testing
- Understand security awareness: organizational culture, social engineering and phishing
Student reviews
No reviews yet — be the first to share your experience.
Tertiary Exams provides original practice questions for learning. We are not affiliated with ISC2, and we do not provide real exam dumps.