Question 1Supply chain risk management
A government contractor is worried that servers could be tampered with while being shipped from the manufacturer. Which practice BEST addresses this risk when the servers arrive?
The CISSP pass rate
ISC2 does not publish a pass rate for the CISSP exam, or how many people take it. The useful number is your own score in each of the eight domains.
| Format | Computerized adaptive test |
|---|---|
| Items | 100 to 150, 25 of them unscored |
| Time | Up to 3 hours |
| Passing standard | 700 out of 1000 scaled points |
| Pass rate | Not published by ISC2 |
| Retake wait | 30, 60 or 90 test-free days |
Measure your own odds instead
- Take the free 15-question diagnostic. It is weighted like the exam outline and shows your score in each domain.
- Work on the weakest domain with its lessons and practice, then sit a full timed practice exam.
- Keep the clock in mind: at 150 items in 3 hours, each item gets about 72 seconds.
If you do not pass
You may retest after 30 test-free days following a first attempt, 60 after a second and 90 after a third or later one, and you may attempt the exam up to four times in 12 months. Each attempt is a new registration, US$749 in the Americas.
Try 3 questions
Question 2Security impact of acquired software
A developer wants to add an open-source encryption library to a customer-facing product. What should the organization's process require before the library is approved?
Question 3Data lifecycle
A customer database at Tidewater Bank has been in service for six years. Nobody has reviewed who has access to it or whether its classification still fits the data it now holds. Which activity BEST addresses this?
Next step
Questions people ask
What percentage of people pass the CISSP?
ISC2 does not publish a pass rate. Figures quoted online are not ISC2's.
How soon can I retake the CISSP?
After 30 test-free days following a first attempt, 60 after a second, and 90 after a third or later one. Up to four attempts are allowed in 12 months.
What do I get if I fail?
A pass or fail report with no numerical score, plus a proficiency level for each domain to show where to study.