ISC2 CCSP

Measured data

ISC2 logo

ISC2 CCSP

CCSP

We scored 150 real ISC2 CCSP exam questions 1-10 on question complexity and broke the result down by exam domain.

150 questions scored
6 domains
2.0/10 overall complexity

Complexity by exam domain

Higher scores mean more demanding question formats. The exam score is computed over the whole bank, not averaged across domains.

Exam complexity score2.0/10Gentle · measured across 150 bank questions
  • Cloud Application Security24 questions · complexity 2.0/10 · Gentle

    33% multi-select · 0% scenario · 33% interactive

  • Cloud Concepts, Architecture and Design26 questions · complexity 2.2/10 · Gentle

    38% multi-select · 0% scenario · 31% interactive

  • Cloud Data Security30 questions · complexity 2.0/10 · Gentle

    33% multi-select · 0% scenario · 33% interactive

  • Cloud Platform & Infrastructure Security26 questions · complexity 2.2/10 · Gentle

    35% multi-select · 8% scenario · 31% interactive

  • Cloud Security Operations25 questions · complexity 1.9/10 · Gentle

    32% multi-select · 0% scenario · 32% interactive

  • Legal, Risk and Compliance19 questions · complexity 1.9/10 · Gentle

    32% multi-select · 0% scenario · 32% interactive

Full per-domain breakdown

Blueprint weight, bank size and question format mix for every domain of the exam.

DomainBlueprintQuestionsSingleMultiInteractiveComplexity
Cloud Application Security16%248882.0/10Gentle
Cloud Concepts, Architecture and Design17%269982.2/10Gentle
Cloud Data Security20%301010102.0/10Gentle
Cloud Platform & Infrastructure Security17%269982.2/10Gentle
Cloud Security Operations17%259881.9/10Gentle
Legal, Risk and Compliance13%197661.9/10Gentle

How the score is calculated

The formula is fixed and public, so anyone can reproduce these numbers from the same bank.

Every question in the ISC2 CCSP bank is measured on four signals that can be read directly from the database. Each signal is expressed as a share of the questions in the domain, and the four shares are combined with fixed weights:

  • Multi-select questions (40% weight). Items with more than one correct answer. The candidate has to find all of them, which is the single hardest format in the bank.
  • Scenario questions (30% weight). Questions longer than 150 characters, which describe a situation instead of a definition and therefore test reasoning rather than recall.
  • Interactive questions (20% weight). Items that require reading code or a configuration snippet.
  • Deep explanations (10% weight). Questions whose explanation runs past 300 characters, which signals a concept with real nuance behind it.

The combined share is multiplied by ten to produce a 1-10 score. The exam-level score is computed over the whole bank rather than averaged across domains, so a small domain cannot distort the total. Figures on this page are recomputed from the live bank on every crawl.

Data set: Certilum ISC2 CCSP Foundation question bank, 150 questions, 6 domains. Published by CERTILUM. This is Certilum’s own measurement of its own question bank and is not an official ISC2 statistic.

Questions analysed
150
Exam domains
6
Hardest domain
Cloud Concepts, Architecture and Design (2.2)
Most approachable domain
Cloud Security Operations (1.9)
Question mix
52 single · 50 multi · 48 interactive
Measured on
Foundation

Frequently asked questions

What our ISC2 CCSP complexity numbers mean and how they are produced.