How many questions are on the ISC2 CCSP exam?

The ISC2 CCSP exam has 150 questions, and the vendor's published description is: 100-150 questions (CAT, 3 hours).

How long do you have to complete the ISC2 CCSP exam?

You get 240 minutes, which is about 96 seconds per question. The published format is: 100-150 questions (CAT, 3 hours).

What score do you need to pass the ISC2 CCSP exam?

The passing score is 70% (700/1,000 scaled score).

How should I use the domain weights when revising?

Weight by percentage, not by domain. 20% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the ISC2 CCSP exam?

Yes: 150 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

ISC2 CCSP Exam Format

CCSP

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. CCSP validates that an experienced cybersecurity professional understands how to design, manage, and secure data, applications, and infrastructure in the cloud. The exam emphasizes practical decision-making across the full cloud lifecycle, from concept and architecture to operations, legal, and compliance. It is a vendor-neutral credential recognized globally and maps directly to the six-domain CCSP CBK. Candidates must demonstrate knowledge of cloud data security, cloud platform and infrastructure security, cloud application security, cloud security operations, and legal, risk, and compliance. The CCSP is designed for IT and security leaders who implement cloud security strategy and protect enterprise cloud environments.

150 questions

240 min

70% to pass

6 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	150
Time limit	240 minutes (96s per question)
Passing score	70% — 700/1,000 scaled score
Domains	6
Level	Professional
Question bank here	150 questions
Published format	100-150 questions (CAT, 3 hours)
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Cloud Data Security	20%	Cloud data lifecycle and data dispersion Design and implementation of cloud data storage architectures Data discovery, classification, and mapping +4 more	30
Cloud Security Operations	17%	Building, operating, and maintaining cloud physical and logical infrastructure Security operations management and monitoring Incident response and forensic investigations +6 more	25
Cloud Application Security	16%	Secure software development lifecycle concepts Applying SDLC in cloud and DevSecOps environments Secure coding standards, code review, and CI/CD controls +3 more	24
Legal, Risk and Compliance	13%	Legal frameworks, jurisdiction, and data sovereignty Privacy principles and regulatory requirements Cloud audit process, methodologies, and adaptations +3 more	19
Cloud Concepts, Architecture and Design	17%	Cloud computing definitions and essential characteristics Cloud service models: IaaS, PaaS, SaaS Cloud deployment models: public, private, hybrid, community +4 more	26
Cloud Platform & Infrastructure Security	17%	Physical, network, and virtualization infrastructure components Secure data center design and redundancy planning Risk analysis for cloud infrastructure +2 more	26

The heaviest domain is Cloud Data Security at 20%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Exam outline effective 2026-08-01; scaled score 0-1,000, passing 700. Official exam page

More about the ISC2 CCSP exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Exam costPrice, retakes and total budget Pass rateThe score you need Who can take itRequirements and prerequisites Study planHow to prepare, by domain

Related certifications

Explore other certifications in the same category and see how they stack up.

Microsoft Certified: Cybersecurity Architect Expert

Microsoft

AWS Certified Security – Specialty

Amazon Web Services

Arista Network Detection & Response Specialist

Arista

Azure Security Engineer Associate

Microsoft

CCNP Security

Cisco

Certificate of Cloud Security Knowledge v5

Cloud Security Alliance

Guides and articles

More context about this certification, straight from our blog.

Is the ISC2 CCSP Worth $599 in 2026? An Honest Cost-Benefit BreakdownThe CCSP costs USD 599, is CAT-examined with 100 to 150 questions, and takes three years of experience to qualify for. Here is who it pays off for, who it does not, and what it does not replace.5 min read

Frequently asked questions

Everything you need to know about the ISC2 CCSP exam.

There are 6 domains: Cloud Data Security, Cloud Security Operations, Cloud Application Security, Legal, Risk and Compliance, Cloud Concepts, Architecture and Design, Cloud Platform & Infrastructure Security. The official weights are Cloud Data Security 20%, Cloud Security Operations 17%, Cloud Application Security 16%, Legal, Risk and Compliance 13%, Cloud Concepts, Architecture and Design 17%, Cloud Platform & Infrastructure Security 17%.