Free CISSP Practice Test 2026
224 manager-level questions weighted to the eight ISC2 domains. Tuned for mobile. No account needed.
Train on mobile
Test on desktop
The CISSP exam at a glance
The CISSP exam is computerized adaptive in every language: 100 to 150 questions in 3 hours, answered in order with no going back. It is scored on a 0 to 1000 scale and 700 passes. The April 15, 2024 outline weights eight domains: Security and Risk Management 16%, Asset Security 10%, Security Architecture and Engineering 13%, Communication and Network Security 13%, Identity and Access Management 13%, Security Assessment and Testing 12%, Security Operations 13% and Software Development Security 10%. Certification also needs five years of paid work in two or more domains.
Tigertest has 224 CISSP practice questions with explanations, all free with no account required.
- Questions
- 100 to 150 (adaptive)
- Time
- 3 hours
- Passing score
- 700 on a 0 to 1000 scale
- Domains
- 8, weighted 10% to 16%
- Experience
- 5 years in 2 or more domains (or Associate of ISC2)
- Given by
- ISC2, at Pearson VUE test centers
Updated by the Tigertest team. Practice questions follow the ISC2 CISSP exam outline effective April 15, 2024. Exam rules change, so confirm current details with ISC2.
How It Works
Eight Domain Drills
One drill per CISSP domain, from risk management and asset security through network security, identity, testing, operations and secure software. Questions you miss come back until you have mastered them.
Practice Tests
Two 100-question tests in 2 hours, answered in order with no going back, like the real adaptive exam. Questions ask for the best or first action a security manager would take. Practice Test 2 is held out of the drills, so it measures readiness.
Built on the 2024 CISSP Outline
ISC2 publishes the weight of each of the eight domains in the CISSP exam outline effective April 15, 2024. Every practice test here follows those weights, and every question is original and explained.
Help Make Tigertest Better
Have an idea, a topic you'd like covered, or a question that could be clearer? We read every message and use it to improve every test.
Share FeedbackHow to Pass the CISSP Exam
1. Think like a manager
Most questions ask for the BEST, FIRST or MOST important step. People come first, then the business. Senior management owns risk decisions, owners classify data, and you assess and plan before you buy a tool or rebuild a server.
2. Know the pairs that look alike
Due care and due diligence. Bell-LaPadula for confidentiality, Biba for integrity. RTO and RPO. Policy, standard, procedure and guideline. False acceptance and false rejection. SOC 2 Type I and Type II. Clear, purge and destroy. Many wrong answers on the CISSP are the other half of a pair.
3. Learn the processes in order
The exam expects you to know where a step falls: the RMF from categorize to monitor, business continuity from charter and BIA to testing, incident management from detection to lessons learned, and the SDLC from requirements to disposal.
4. Drill your weak domain
Tigertest tracks your accuracy by domain. The real exam is scored on a 0 to 1000 scale with 700 to pass, which is not a fixed percent. Retake the drill you missed most until you clear 80 percent, then take Practice Test 2 cold.
CISSP Frequently Asked Questions
How many questions are on the CISSP exam?
The CISSP exam is computerized adaptive (CAT) in every language: 100 to 150 questions in 3 hours. It stops once it is confident you are above or below the passing standard, so the number of questions varies from person to person. You answer in order and cannot go back. The score is scaled from 0 to 1000 and 700 passes.
What are the eight CISSP domains and their weights?
On the outline effective April 15, 2024: Security and Risk Management 16 percent, Asset Security 10 percent, Security Architecture and Engineering 13 percent, Communication and Network Security 13 percent, Identity and Access Management 13 percent, Security Assessment and Testing 12 percent, Security Operations 13 percent, and Software Development Security 10 percent.
What does it mean to think like a manager on the CISSP?
Many questions ask for the BEST, FIRST or MOST important action. The answer is usually the one a security manager would choose: protect people first, follow governance and senior management's risk decisions, assess before acting, and prefer policy and process over a quick technical fix.
Is this practice test the same format as the real exam?
Close, but not adaptive. Each practice test is a linear 100-question mock, the CAT minimum, in 120 minutes, which is the real pace of 150 questions in 3 hours. Like the real exam you answer in order with no going back, and ordering and matching items stand in for drag and drop. These are original practice questions, not real exam questions, and scores here are percent correct rather than ISC2's scaled score.
Is the Tigertest CISSP practice test free?
Yes. Both practice tests and all eight domain drills are free, with no account required. Create a free account if you want your progress saved across devices.
I teach a CISSP or information security course. Can my students use Tigertest?
Yes, for free. Make a class at tigertest.io/teach, post one link, and students join with just their name. You see who practiced, their test scores and the topics your class misses most.
Related practice tests
Every test on Tigertest is free and needs no account to start.
- CompTIA Security+ Practice TestCompTIA SY0-701
- CompTIA Network+ Practice TestCompTIA N10-009
- CompTIA A+ Practice TestCompTIA 220-1201 / 220-1202
- AWS Cloud Practitioner Practice TestAWS CLF-C02
- AWS Solutions Architect Associate Practice TestAWS SAA-C03
- AZ-900 Azure Fundamentals Practice TestMicrosoft AZ-900
Ready to Pass the CISSP?
Free to start. No account required. 224 questions across all eight domains.
Start practicing