Last updated:
CISSP credential
What is the current CISSP exam format?
Direct answer
The current English CISSP exam uses computerized adaptive testing, lasts up to three hours, presents 100–150 items, and requires a scaled score of 700 out of 1000. Use the official outline for language, item types, domain weights, and current effective dates; do not turn scaled scoring into a percentage. First, verify the applicable language and outline on ISC2’s current exam page, then verify the decision on unfamiliar scenarios and explain why the strongest distractor loses.
the CISSP exam format: a practical decision framework
| Check | How to use it |
|---|---|
| Objective | Use the official outline for language, item types, domain weights, and current effective dates; do not turn scaled scoring into a percentage. |
| First move | verify the applicable language and outline on ISC2’s current exam page |
| Common trap | Assuming every candidate receives the same item count or that 700 out of 1000 means seventy percent correct. |
the CISSP exam format in practice
A candidate builds a timing plan by dividing three hours by 150 items and concludes that every question must receive exactly seventy-two seconds.
CAT length varies and item complexity differs. Practice a controlled rhythm with checkpoints instead of a false fixed-item formula.
What matters most for the CISSP exam format
Use the official outline for language, item types, domain weights, and current effective dates; do not turn scaled scoring into a percentage.
The current English CISSP exam uses computerized adaptive testing, lasts up to three hours, presents 100–150 items, and requires a scaled score of 700 out of 1000. The useful question is not whether an isolated fact looks familiar, but whether you can apply it under the actor, authority, objective, qualifier, and constraints in the scenario.
How to work on the CISSP exam format
verify the applicable language and outline on ISC2’s current exam page
For the CISSP exam format, separate official facts from CertArc guidance and market observations. Check the named primary source and access date before acting on a volatile fee, policy, format, or product claim.
- Name the actor and the authority that actor holds.
- Underline the qualifier and the required business or security outcome.
- Check sequence, scope, constraints, and residual risk before choosing.
The mistake that distorts the CISSP exam format
Assuming every candidate receives the same item count or that 700 out of 1000 means seventy percent correct.
This error can survive repeated question practice when review stops at the correct letter. Rework the item until you can state the transferable rule without quoting the stem.
How to verify guidance about the CISSP exam format
CAT length varies and item complexity differs. Practice a controlled rhythm with checkpoints instead of a false fixed-item formula.
Retest the CISSP exam format with a changed actor, qualifier, constraint, or domain context. Keep the result only when the same reasoning survives unfamiliar wording and you can explain what evidence would make another option stronger.
- Use an unfamiliar scenario rather than a repeated item.
- Record confidence before opening the explanation.
- Name the evidence that would reverse the decision.
Sources and fact check
Source checked: 2026-08-24
- CertArc is an independent exam-preparation platform and is not affiliated with or endorsed by ISC2.
- CertArc uses original practice questions, not live or recalled exam items, and does not reproduce the CISSP CAT algorithm.
- Practice performance is study evidence, not a pass prediction or guarantee.
Frequently asked questions
What is the current CISSP exam format?
The current English CISSP exam uses computerized adaptive testing, lasts up to three hours, presents 100–150 items, and requires a scaled score of 700 out of 1000. Use the official outline for language, item types, domain weights, and current effective dates; do not turn scaled scoring into a percentage. First, verify the applicable language and outline on ISC2’s current exam page, then verify the decision on unfamiliar scenarios and explain why the strongest distractor loses.
Which facts about the CISSP exam format can change?
Exam policies, fees, formats, credential requirements, and product capabilities can change. Check the named primary source and access date before acting.
What is official fact versus CertArc guidance for the CISSP exam format?
Official facts come from the cited certification body. CertArc frameworks, examples, product descriptions, and study recommendations are clearly presented as independent guidance.
What is the main source mistake with the CISSP exam format?
Assuming every candidate receives the same item count or that 700 out of 1000 means seventy percent correct. Prefer current first-party evidence and keep unsupported anecdotes separate from verified facts.
How should I use this guide?
Verify the applicable language and outline on ISC2’s current exam page Follow the linked canonical guide when your question needs more detail or a more recent fact check.