How many questions are on the ISC2 CISSP exam?

The ISC2 CISSP exam has 150 questions, and the vendor's published description is: 100-150 questions (CAT, English).

How long do you have to complete the ISC2 CISSP exam?

You get 180 minutes, which is about 72 seconds per question. The published format is: 100-150 questions (CAT, English).

What score do you need to pass the ISC2 CISSP exam?

The passing score is 70% (700/1,000 scaled score).

How should I use the domain weights when revising?

Weight by percentage, not by domain. 10% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the ISC2 CISSP exam?

Yes: 150 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

ISC2 CISSP Exam Format

CISSP

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The CISSP certification validates advanced information security skills across eight domains. It is a vendor-neutral credential, and the 2024 exam outline places additional emphasis on cloud security architecture, DevOps security, and identity-centric strategies. The English CAT exam adapts to candidate performance and includes 100 to 150 questions within 180 minutes. Candidates are expected to combine deep technical knowledge with managerial judgment. Achieving CISSP demonstrates the ability to design, engineer, implement, and manage security programs that protect organizational assets. It remains one of the most respected and widely recognized credentials in global cybersecurity.

150 questions

180 min

70% to pass

8 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	150
Time limit	180 minutes (72s per question)
Passing score	70% — 700/1,000 scaled score
Domains	8
Level	Expert
Question bank here	150 questions
Published format	100-150 questions (CAT, English)
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Asset Security	10%	Information and asset classification Ownership and custodianship Privacy and data protection +2 more	15
Security Operations	13%	Incident management and response Investigations and digital forensics Monitoring, detection, and alerting +2 more	19
Security and Risk Management	16%	Security governance principles Compliance and legal/regulatory requirements Professional ethics +3 more	24
Software Development Security	10%	Application security in the SDLC Secure coding standards and guidelines Security controls in development environments +2 more	15
Security Assessment and Testing	12%	Assessment and test strategies Security control testing Collection and analysis of process data +2 more	18
Communication and Network Security	13%	Secure design principles for network protocols Secure network components and architectures Secure communication channels +1 more	20
Identity and Access Management (IAM)	13%	Identification, authentication, authorization, and accountability Identity and access provisioning lifecycle Authentication systems and mechanisms +2 more	19
Security Architecture and Engineering	13%	Secure design principles and engineering processes Security models and fundamental concepts Security capabilities of information systems +2 more	20

The heaviest domain is Asset Security at 10%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Regional pricing differs (EUR 719.04 EMEA / GBP 606.69 UK); taxes based on exam location. Verified on official ISC2 pages. Official exam page

More about the ISC2 CISSP exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Exam costPrice, retakes and total budget Pass rateThe score you need Who can take itRequirements and prerequisites Study planHow to prepare, by domain

Related certifications

Explore other certifications in the same category and see how they stack up.

Certified Information Privacy Manager

IAPP

Certified Information Privacy Professional/US

IAPP

Certified Information Privacy Technologist

IAPP

Certified Threat Intelligence Manager

Guides and articles

More context about this certification, straight from our blog.

ISC2 CISSP Certification: Exam Guide 2024Master the ISC2 CISSP certification with 100-150 CAT questions, 180 minutes, and USD 749 fee. Technical breakdown.11 min read

Frequently asked questions

Everything you need to know about the ISC2 CISSP exam.

There are 8 domains: Asset Security, Security Operations, Security and Risk Management, Software Development Security, Security Assessment and Testing, Communication and Network Security, Identity and Access Management (IAM), Security Architecture and Engineering. The official weights are Asset Security 10%, Security Operations 13%, Security and Risk Management 16%, Software Development Security 10%, Security Assessment and Testing 12%, Communication and Network Security 13%, Identity and Access Management (IAM) 13%, Security Architecture and Engineering 13%.