How many questions are in the NIST Cybersecurity Framework Foundation practice bank?

The Certilum bank for the NIST Cybersecurity Framework Foundation holds 40 Foundation questions across 5 exam domains. Every question ships with a written explanation of why the right answer is right, and each row exists in three wording variants, so a session never repeats itself verbatim.

How long is the NIST Cybersecurity Framework Foundation exam?

The real APMG International exam is timed at around 40 minutes, with a passing score of 60%. The Certilum diagnostic mirrors that structure so your practice session feels like test day.

What is the NIST Cybersecurity Framework Foundation exam complexity score?

We measured 40 questions and scored them 1-10 on a composite of format difficulty: multi-select questions (which require every correct option), scenario-length questions, interactive code questions and explanation depth. The NIST Cybersecurity Framework Foundation scores 2.3 out of 10, with a per-domain breakdown on the difficulty page.

Is the NIST Cybersecurity Framework Foundation exam practice free?

Yes. You can run the full diagnostic for free, get domain-level scoring and see which domains cost you the most points before deciding whether to go further.

Which domains should I focus on for the NIST Cybersecurity Framework Foundation?

The NIST Cybersecurity Framework Foundation blueprint is split into 5 domains, and the heaviest one carries 35% of the exam. The difficulty breakdown shows where the hardest questions actually sit, so you can spend your study time where it pays.

Free diagnostic practice

NIST Cybersecurity Framework Foundation

nist-cybersecurity-framework-foundation

The APMG International NIST Cybersecurity Framework Foundation certification validates a professional's understanding of the NIST CSF, a voluntary framework consisting of standards, guidelines, and best practices to manage cybersecurity risk

40 min

60% to pass

40 bank questions

5 domains

certilum

Start the full practice examNIST Cybersecurity Framework Foundation — freshly shuffled Foundation questions, timed, with domain scoring and explanations.

Exam syllabus, organized by domain

The official APMG International blueprint, with the real weight each domain carries on test day.

Try a real question

Answer one question from the live bank. Grading happens on our servers, so the answer key never reaches the page.

Try a real question

Sample NIST Cybersecurity Framework Foundation exam question

Answer this question the same way you would on exam day. No sign-up needed — one random question, three tries to swap it out.

FoundationFramework Core - Protect, Detect, and Respond Functions

Select two categories that are part of the Respond Function.

Exam facts at a glance

Every figure below comes from the certification record or from the question bank itself.

Time limit: 40 minutes
Passing score: 60%
Domains: 5
Questions in our bank: 40
Level: FOUNDATION
Measured complexity: 2.3 / 10
Question mix: 15 single · 14 multi · 11 interactive

Where the hard questions actually are

We score every question in the bank 1-10 on a reproducible formula. Below is the per-domain breakdown.

Exam complexity score2.3/10Gentle · measured across 40 bank questions

Applying the Framework and Exam Preparation4 questions · complexity 1.8/10 · Gentle
25% multi-select · 0% scenario · 25% interactive
Framework Core - Identify Function8 questions · complexity 3.0/10 · Gentle
50% multi-select · 13% scenario · 25% interactive
Framework Core - Protect, Detect, and Respond Functions14 questions · complexity 2.0/10 · Gentle
36% multi-select · 0% scenario · 29% interactive
Framework Core - Recover Function and Overall Framework Governance8 questions · complexity 2.4/10 · Gentle
38% multi-select · 13% scenario · 25% interactive
Introduction to the NIST Cybersecurity Framework6 questions · complexity 2.0/10 · Gentle
33% multi-select · 0% scenario · 33% interactive