How many questions are on the ISC2 Certified in Cybersecurity exam?

The ISC2 Certified in Cybersecurity exam has 120 questions, and the vendor's published description is: 100-125 items, 2 hours (computerized adaptive testing).

How long do you have to complete the ISC2 Certified in Cybersecurity exam?

You get 120 minutes, which is about 60 seconds per question. The published format is: 100-125 items, 2 hours (computerized adaptive testing).

What score do you need to pass the ISC2 Certified in Cybersecurity exam?

The passing score is 70% (700 out of 1,000 points).

What are the domains on the ISC2 Certified in Cybersecurity exam?

There are 5 domains: Network Security, Security Principles, Security Operations, Access Control Concepts, Business Continuity (BC), Disaster Recovery (DR) & Incident Response (IR). The official weights are Network Security 21%, Security Principles 25%, Security Operations 17%, Access Control Concepts 20%, Business Continuity (BC), Disaster Recovery (DR) & Incident Response (IR) 17%.

How should I use the domain weights when revising?

Weight by percentage, not by domain. 21% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the ISC2 Certified in Cybersecurity exam?

Yes: 120 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

ISC2 Certified in Cybersecurity Exam Format

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The ISC2 Certified in Cybersecurity (CC) certification is a foundational credential designed to validate the essential knowledge required to enter the cybersecurity field. As organizations face increasingly complex digital threats, this certification provides a standardized baseline of security literacy. The exam covers the core pillars of security, including the CIA triad, access control mechanisms, and fundamental networking concepts. It bridges the gap between theoretical knowledge and professional application by introducing candidates to the regulatory and operational frameworks used in modern security environments. By mastering these domains, candidates demonstrate they possess the cognitive framework necessary to support security teams and contribute to organizational resilience in a rapidly evolving threat landscape.

120 questions

120 min

70% to pass

5 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	120
Time limit	120 minutes (60s per question)
Passing score	70% — 700 out of 1,000 points
Domains	5
Level	Associate
Question bank here	120 questions
Published format	100-125 items, 2 hours (computerized adaptive testing)
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Network Security	21%	OSI Model TCP/IP Protocols Network Attacks (DoS, MitM, Spoofing) +2 more	25
Security Principles	25%	Confidentiality, Integrity, Availability (CIA) Authentication, Authorization, and Accounting (AAA) Security Controls (Physical, Technical, Administrative) +2 more	30
Security Operations	17%	Security Monitoring Log Management Data Security and Encryption +2 more	20
Access Control Concepts	20%	Identity and Access Management (IAM) Principle of Least Privilege Multi-Factor Authentication (MFA) +2 more	24
Business Continuity (BC), Disaster Recovery (DR) & Incident Response (IR)	17%	Incident Response Lifecycle Business Impact Analysis (BIA) Disaster Recovery Planning +2 more	21

The heaviest domain is Network Security at 21%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Exam outline effective 2026-09-01. The free 'One Million Certified in Cybersecurity' exam codes closed to new enrollments on 2026-05-20 (previously issued codes usable until 2026-12-31). U.S. $50 annual maintenance fee applies after passing; rescheduling costs U.S. $50 and cancellation U.S. $100. Official exam page