ISC2 SSCP
Unlimited SSCP practice exam retakes, each drawn fresh from a question pool weighted by the official exam domains — security operations & administration, access controls, risk identification/monitoring/analysis, incident response & recovery, cryptography, network & communications security, and systems & application security.
Exam mode Default
180-minute timer, flag for review and a review screen before you submit — just like test day.
Practice mode
See the correct answer, the exam domain and a full explanation after every question.
What you get
- A 195-question pool — every attempt draws 65 fresh questions weighted by the official exam domains
- Unlimited retakes, lifetime access
- Score report by exam domain, with your score trend over time
- Answer review with explanations and reference links
- Original, blueprint-aligned questions — never exam dumps
Ready to sit the real SSCP exam?
Get the official exam voucher and this practice exam is included free (worth US$20.00).
Exam domains
Every attempt draws questions in these official proportions. Open a domain to see the subtopics it covers.
Security Operations and Administration16%
- Comply with codes of ethics
- Understand security concepts
- Identify and implement security controls
- Document and maintain functional security controls
- Support and implement the asset management lifecycle
- Support and implement the change management lifecycle
- Support and implement security awareness and training
- Collaborate with physical security operations
Access Controls15%
- Implement and maintain authentication methods
- Understand and support internetwork trust architectures
- Support and implement the identity management lifecycle
- Understand and administer access controls
Risk Identification, Monitoring, and Analysis15%
- Understand risk management
- Understand legal and regulatory concerns (e.g., jurisdiction, limitations, privacy)
- Perform security assessments and vulnerability management activities
- Operate and monitor security platforms (e.g., continuous monitoring)
- Analyze monitoring results
Incident Response and Recovery14%
- Understand and support the incident response lifecycle (e.g., NIST, ISO)
- Understand and support forensic investigations
- Understand and support business continuity (BCP) and disaster recovery plans (DRP)
Cryptography9%
- Understand reasons and requirements for cryptography
- Apply cryptography concepts
- Understand and implement secure protocols
- Understand public key infrastructure (PKI)
Network and Communications Security16%
- Understand and apply fundamental concepts of networking
- Understand network attacks and countermeasures (e.g., DDoS, MITM, DNS cache poisoning)
- Manage network access controls
- Manage network security
- Operate and configure network-based security appliances and services
- Secure wireless communications
- Secure and monitor Internet of Things (IoT)
Systems and Application Security15%
- Identify and analyze malicious code and activity
- Implement and operate endpoint device security
- Administer and manage mobile devices
- Understand and configure cloud security
- Operate and maintain secure virtual environments
Student reviews
No reviews yet — be the first to share your experience.
Tertiary Exams provides original practice questions for learning. We are not affiliated with ISC2, and we do not provide real exam dumps.