Question 1

How many questions are on the NIST Cybersecurity Framework Foundation exam?

Accepted Answer

Our record lists 40 questions for the NIST Cybersecurity Framework Foundation. The vendor does not publish a question count, so treat that as a working figure rather than an official specification.

Question 2

How long do you have to complete the NIST Cybersecurity Framework Foundation exam?

Accepted Answer

Our record lists 40 minutes, roughly 60 seconds per question. The vendor does not publish a duration for this exam, so use it as a planning figure.

Question 3

What score do you need to pass the NIST Cybersecurity Framework Foundation exam?

Accepted Answer

Our record lists 60% as the pass mark for the NIST Cybersecurity Framework Foundation. Most certification bodies do not publish a numeric cut score, so treat this as our benchmark rather than an official threshold.

Question 4

What are the domains on the NIST Cybersecurity Framework Foundation exam?

Accepted Answer

There are 5 domains: Framework Core - Identify Function, Applying the Framework and Exam Preparation, Introduction to the NIST Cybersecurity Framework, Framework Core - Protect, Detect, and Respond Functions, Framework Core - Recover Function and Overall Framework Governance. The official weights are Framework Core - Identify Function 20%, Applying the Framework and Exam Preparation 10%, Introduction to the NIST Cybersecurity Framework 15%, Framework Core - Protect, Detect, and Respond Functions 35%, Framework Core - Recover Function and Overall Framework Governance 20%.

Question 5

How should I use the domain weights when revising?

Accepted Answer

Weight by percentage, not by domain. 20% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Question 6

Does Certilum have practice questions for the NIST Cybersecurity Framework Foundation exam?

Accepted Answer

Yes: 40 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Specification	Value
Questions	40
Time limit	40 minutes (60s per question)
Passing score	60%
Domains	5
Level	Foundation
Question bank here	40 questions
Source	Certilum's own record — the vendor does not publish this figure

NIST Cybersecurity Framework Foundation Exam Format

Exam facts at a glance

Official domain weights

More about the NIST Cybersecurity Framework Foundation exam

Related certifications

Frequently asked questions

Domain	Weight	Topics	Practice Qs
Framework Core - Identify Function	20%	Asset Management (ID.AM): Physical, logical, and human assets Business Environment (ID.BE): Mission, stakeholders, supply chain Governance (ID.GV): Policies, legal/regulatory, and risk oversight +3 more	8
Applying the Framework and Exam Preparation	10%	Step-by-step framework implementation methodology Case studies: Real-world NIST CSF adoption Common pitfalls and best practices +2 more	4
Introduction to the NIST Cybersecurity Framework	15%	Overview of NIST and CSF history Purpose and benefits of the Framework Framework core components: Functions, Categories, Subcategories +3 more	6
Framework Core - Protect, Detect, and Respond Functions	35%	Protect (PR): Access control, Awareness/Training, Data Security, Information Protection Processes, Maintenance, Protective Technology Detect (DE): Anomalies/Events, Continuous Monitoring, Detection Processes Respond (RS): Response Planning, Communications, Analysis, Mitigation, Improvements +2 more	14
Framework Core - Recover Function and Overall Framework Governance	20%	Recover (RC): Recovery Planning, Improvements, Communications Business continuity and disaster recovery integration Framework Implementation Tiers: Partial, Risk-Informed, Repeatable, Adaptive +3 more	8