Question 1Privacy program and principles
A city transit agency is building a mobile ticketing app that will track rider journeys. When should a privacy impact assessment be performed?
What is the CISA exam format?
The exam is 150 multiple-choice questions in 4 hours, taken at a PSI test center or remotely proctored. It follows ISACA's CISA Exam Content Outline and its five weighted domains.
| Questions | 150 multiple choice |
|---|---|
| Time | 4 hours (240 minutes) |
| Score scale | 200 to 800 |
| Passing score | 450 |
The five domains
| Domain | Share of the exam |
|---|---|
| 1. Information Systems Auditing Process | 18% |
| 2. Governance and Management of IT | 18% |
| 3. Information Systems Acquisition, Development and Implementation | 12% |
| 4. Information Systems Operations and Business Resilience | 26% |
| 5. Protection of Information Assets | 26% |
On the day
- Two breaks are allowed, each no longer than ten minutes, with permission.
- Registration is continuous: you can register at any time and schedule from 48 hours after paying. You then have six months to sit the exam.
- Appointments open 90 days ahead, and you can reschedule without a fee up to 48 hours before your appointment.
How our practice exams match it
Our two practice exams give 150 questions in 4 hours each, split across the domains by their weights, so you practice the full length and pace. Every question here is multiple choice.
Try 3 questions
Question 2Operational log management
Which is the BEST basis for setting the log retention period at a health insurer?
Question 3Physical and environmental controls
Environmental monitoring at a university data center shows relative humidity well below the recommended range for several weeks. Which risk does this MOST increase?
Next step
Questions people ask
How many questions are on the CISA exam?
150 multiple-choice questions, including some unscored pretest questions.
How long is the CISA exam?
4 hours (240 minutes), with two optional breaks of up to ten minutes each.
Which domains carry the most weight?
Information Systems Operations and Business Resilience and Protection of Information Assets, at 26% each.