Practice ExamISC2CISSPProfessional
ISC2 CISSP
Unlimited CISSP practice exam retakes, each drawn fresh from a question pool weighted by the official exam domains — covering security & risk management, asset security, security architecture & engineering, communication & network security, identity & access management, security assessment & testing, security operations, and software development security.
Question pool
346
Per attempt
60 Q
Duration
240 min
Pass score
70%
Exam mode Default
240-minute timer, flag for review and a review screen before you submit — just like test day.
Practice mode
See the correct answer, the exam domain and a full explanation after every question.
What you get
- A 346-question pool — every attempt draws 60 fresh questions weighted by the official exam domains
- Unlimited retakes, lifetime access
- Score report by exam domain, with your score trend over time
- Answer review with explanations and reference links
- Original, blueprint-aligned questions — never exam dumps
Best value
Ready to sit the real CISSP exam?
Get the official exam voucher and this practice exam is included free (worth US$20.00).
Voucher + practice
US$749.00
GST inclusive
Exam domains
Every attempt draws questions in these official proportions. Open a domain to see the subtopics it covers.
Security and Risk Management16%
Security and Risk Management16%
- Promote ethics and apply security concepts (CIA, authenticity, non-repudiation)
- Evaluate and apply security governance principles
- Understand legal, regulatory and compliance issues and investigation types
- Develop, document and implement security policy, standards, procedures and guidelines
- Identify, analyze, prioritize and implement Business Continuity (BC) requirements
- Contribute to and enforce personnel security policies and procedures
- Apply risk management, threat modeling and Supply Chain Risk Management (SCRM) concepts
- Establish and maintain a security awareness, education and training program
Asset Security10%
Asset Security10%
- Identify and classify information and assets
- Establish information and asset handling requirements
- Provision information and assets securely
- Manage data lifecycle
- Ensure appropriate asset retention (e.g., End of Life, End of Support)
- Determine data security controls and compliance requirements
Security Architecture and Engineering13%
Security Architecture and Engineering13%
- Research, implement and manage engineering processes using secure design principles
- Understand security models and select controls based on systems security requirements
- Understand security capabilities of Information Systems (e.g., TPM, memory protection)
- Assess and mitigate vulnerabilities of security architectures, designs and solutions
- Select and determine cryptographic solutions
- Understand methods of cryptanalytic attacks
- Apply security principles to site and facility design and controls
- Manage the information system lifecycle
Communication and Network Security13%
Communication and Network Security13%
- Apply secure design principles in network architectures
- Secure network components
- Implement secure communication channels according to design
Identity and Access Management13%
Identity and Access Management13%
- Control physical and logical access to assets
- Design identification and authentication strategy (people, devices and services)
- Federated identity with a third-party service
- Implement and manage authorization mechanisms
- Manage the identity and access provisioning lifecycle
- Implement authentication systems
Security Assessment and Testing12%
Security Assessment and Testing12%
- Design and validate assessment, test and audit strategies
- Conduct security control testing
- Collect security process data (e.g., technical and administrative)
- Analyze test output and generate report
- Conduct or facilitate security audits
Security Operations13%
Security Operations13%
- Understand and comply with investigations
- Conduct logging and monitoring activities
- Perform configuration management and apply foundational security operations concepts
- Apply resource protection and conduct incident management
- Operate and maintain detection and preventative measures
- Implement patch and vulnerability management and participate in change management
- Implement recovery strategies and Disaster Recovery (DR) processes, and test DR plans
- Participate in BC planning, manage physical security and address personnel safety
Software Development Security10%
Software Development Security10%
- Understand and integrate security in the Software Development Life Cycle (SDLC)
- Identify and apply security controls in software development ecosystems
- Assess the effectiveness of software security
- Assess security impact of acquired software
- Define and apply secure coding guidelines and standards
Student reviews
No reviews yet — be the first to share your experience.
Tertiary Exams provides original practice questions for learning. We are not affiliated with ISC2, and we do not provide real exam dumps.
CISSP Practice Exam
US$20.00 GST inclusive