Question 1Investigation types
A company sues a former sales manager for damages, claiming he took its customer list to a competitor. What standard of proof will the company normally need to meet in this civil case?
The CISSP exam format and domains
The exam is a computerized adaptive test: 100 to 150 items in up to 3 hours, with 25 unscored pretest items you cannot tell apart. It follows the exam outline effective 15 April 2024 and its eight weighted domains.
| Format | Computerized adaptive test |
|---|---|
| Items | 100 to 150, 25 of them unscored |
| Time | Up to 3 hours |
| Passing standard | 700 out of 1000 scaled points |
| Languages | Chinese, English, German, Japanese, Spanish |
| Delivery | ISC2-authorized Pearson VUE test centers |
The eight domains and their weights
| Domain | Weight |
|---|---|
| 1. Security and Risk Management | 16% |
| 2. Asset Security | 10% |
| 3. Security Architecture and Engineering | 13% |
| 4. Communication and Network Security | 13% |
| 5. Identity and Access Management | 13% |
| 6. Security Assessment and Testing | 12% |
| 7. Security Operations | 13% |
| 8. Software Development Security | 10% |
How the adaptive format works
- The first item is well below the passing standard; each answer updates your ability estimate and sets the next item's difficulty.
- Items are not in sections: they come in no set order, but every exam follows the domain weights whatever its length.
- Item review is not permitted. Once you finalize an answer, it cannot be changed.
- Items are multiple choice and advanced item types. Breaks are allowed but count against the 3 hours.
Our practice exams
Our practice exams give the full 150 items in 3 hours, the longest the real exam can run, split across the domains by their weights, so you practice the pace at its hardest. Every question here is multiple choice.
Try 3 questions
Question 2Secure network architecture design
A law firm runs VoIP across its campus. The managing partner requires that calls cannot be overheard even by someone who gains access to the voice VLAN. Which control BEST meets this requirement?
Question 3Detective and preventive measures
The security architect at Juniper Fields Energy is concerned about new attacks for which no signatures exist yet. Which detection method BEST addresses this concern?
Next step
Questions people ask
How many questions are on the CISSP exam?
Between 100 and 150, including 25 unscored pretest items. The adaptive exam stops when it is confident of the result, at the maximum length, or when time runs out.
Which domain carries the most weight?
Security and Risk Management, at 16% of the exam outline. Four domains follow at 13% each.
How much does the CISSP exam cost?
US$749 standard registration in the Americas, Asia Pacific, the Middle East and Africa, per ISC2's exam pricing page.