USA
Certified Information Systems Security Professional (CISSP) Examination
600 questions
Session complete
Keep going in the FoxExams app for adaptive practice, mocks, and Ask Fox.
See you tomorrow
About this exam
The Certified Information Systems Security Professional (CISSP) Examination assesses broad, senior-level information security knowledge for professionals who design, manage, and oversee security programs. It is relevant to military and defense candidates, federal employees, and contractors working with sensitive systems, but passing the exam does not provide a security clearance or guarantee a particular job. The exam covers eight domains, including security and risk management, asset security, security architecture, identity and access management, security operations, and business continuity and disaster recovery.
For military-focused candidates, CISSP topics connect to governance, risk decisions, personnel security, security awareness, policy, compliance, and continuity planning across mission environments. The exam tests how you apply concepts and choose sound risk-based responses, not just whether you can recall definitions. Preparation usually involves reviewing the current ISC2 exam outline, strengthening weaker domains, and practicing scenario-based reasoning. Military experience can provide useful context, but candidates should also learn the broader terminology and frameworks used across commercial and government organizations.
How to prepare for the CISSP Examination
- Use the current ISC2 CISSP exam outline to map the eight domains, then prioritize gaps in governance, risk management, personnel security, and continuity planning.
- Review policies, standards, professional ethics, and incident or recovery scenarios; practice explaining why a risk-based response is preferable to a purely technical fix.
- Build timed study sessions with mixed, scenario-based questions, review every rationale, and confirm exam format and eligibility details through official ISC2 sources.
FAQ
Who is eligible to take the CISSP exam?
Candidates can take the exam before meeting the work-experience requirement. To earn the CISSP certification, you generally need five years of cumulative paid work experience in at least two of the eight domains; an eligible degree or credential may waive one year. Candidates who pass but lack the required experience may be eligible to become an Associate of ISC2 and complete the experience requirement later.
What is the format of the CISSP exam?
The English CISSP exam is computer-based and uses computerized adaptive testing. It has 100 to 150 questions and a maximum testing time of three hours. Question formats and exam delivery details can change, so check ISC2's official CISSP exam information before scheduling.
What subjects are covered on the CISSP exam?
The exam covers eight domains: security and risk management; asset security; security architecture and engineering; communication and network security; identity and access management; security assessment and testing; security operations; and software development security. Use the current ISC2 exam outline for the precise topic breakdown.