Do Certification Exams Give Partial Credit? How Multiple-Response Questions Are Actually Scored

A multiple-response question with two correct answers out of five is a different bet depending on who wrote the exam. Treating "roughly half right" as partial credit is the most common miscalculation in certification preparation, and it is wrong in a specific way for each vendor.

PMI: one point per question, then a band, not a number

PMI's published score report example is unambiguous: "Each scored question on the exam is worth one point; and your final score is calculated by totaling the points you have earned on the exam." A multiple-response question is worth one point, so it is all or nothing — picking two of three correct answers scores the same as picking none.

What the report does not contain is a number you can check yourself against. PMI states that "the number of questions you answer correctly places you within one of the performance rating categories" and the categories are:

• Above Target — performance exceeds the minimum requirements.
• Target — performance meets the minimum requirements.
• Below Target — slightly below target, does not meet the minimum.
• Needs Improvement — far below target, does not meet the minimum.

These are calculated within each domain, and the report includes a "Your Performance by Domain" section. The cut is set by subject matter experts through "sound psychometric analysis", and PMI describes the exams as criteria-based. Any percentage you have read for the PMP — 60%, 65% — is somebody's estimate, not PMI's.

One consequence worth internalising: the score at the end of your session is preliminary, and the official report can take up to 10 business days to arrive.

ISC2: compensatory by design, and no score at all

ISC2's CISSP documentation says the exam is "a single pass/fail result calculated on the total of all operational items" and, more importantly, that "ISC2 exams are compensatory exams which allow for a higher number of items answered correctly in one domain to compensate for a lower performance in another domain."

That is a materially different model from PMI's. In a compensatory exam, a weak domain is not automatically fatal, because the domains are not weighted independently — the total operational set carries the result.

What you get is even less than a score. ISC2's own page answers the question directly: "No scores are provided." Failing candidates do receive a rank ordering of domains by level — below proficiency, near proficiency, above proficiency — at the testing center, and that is it. Candidates are not told how many questions they got right or what percentage that was.

Note that the pre-exam guidance mentions a scale score of at least 700 out of 1,000 to pass. That is the standard for the ISC2 cybersecurity exams, and the exams themselves are scored pass/fail on the operational items — a distinction that catches people out.

CompTIA: the method is deliberately not public

CompTIA's position is that it will not tell you how it works, and says so plainly: "CompTIA does not release specific exam questions, answers, scoring keys, or detailed scoring information."

What it does publish is the shape of the output. A mathematical algorithm produces a "scaled score" that is "derived from what would otherwise be a percentage score", and passing scores are "set using statistical analysis and are subject to change". Security+ V7 uses a 100-900 scale with a passing score of 750.

Two consequences. First, your score report lists "a list of exam objectives associated with questions that were answered incorrectly" — which tells you which objectives to revise, but not which questions you got wrong or how many. Second, a result can come back indeterminate, in which case "CompTIA will allow candidates whose scores are determined to be indeterminate the option of retaking the exam at no cost" — but an indeterminate score "will not be considered valid and will not be eligible for certification".

CompTIA also does not publish pass rates, on the grounds that questions and pass rates change without notice. If you have seen a CompTIA pass rate quoted, it did not come from CompTIA.

How to apply this when you practise

The scoring model changes what "practising" means:

• PMI-style (all-or-nothing per item): a partial answer is worth nothing, so the question is not "can I get two of these" but "which set is the complete set". Practise reading the stem for what it excludes.
• ISC2-style (compensatory): a weak domain is recoverable, so a diagnostic by domain is the highest-value thing you can do. It tells you where to spend the remaining weeks.
• CompTIA-style (scaled, undisclosed): treat the objective list in your report as the definitive map of your gaps, and use the free 100-900 scale as a progress number rather than a pass/fail proxy.