Free practice test
CISSPFree ISC2 CISSP practice test
10 original CISSP questions, playable right now. No account, no card, no email gate. Every answer opens the full explanation: the concept, why the right option is right, and why each wrong option is wrong, cited to the authoritative documentation behind it.
Sample question 1 of 10
To speed up supplier assessment, a procurement team proposes accepting any vendor holding an ISO/IEC 27001 certificate, no further questions. How should such certifications be treated?
Sample question 2 of 10
An engineer deploys ingress filtering at an internet provider aggregation point to blunt spoofed source address attacks. Which two outcomes should the team expect? (Choose two.)
Sample question 3 of 10
Which assurance level under SP 800-63 covers identity proofing?
Sample question 4 of 10
In a leaked table, two users with identical passwords have different hashes. What explains this?
Sample question 5 of 10
A team producing intelligence wants to recommend response steps to its consumers. Which object expresses this?
Sample question 6 of 10
A manager wants to log every possible event at maximum detail to be safe. What risk does the guidance warn this creates?
Sample question 7 of 10
A company's child-directed service only accepts details children volunteer; nothing is required. Does COPPA still apply?
Sample question 8 of 10
A developer adds synchronizer tokens to every state changing request in a web application. Which two checks must the server side perform on each incoming request? (Choose two.)
Sample question 9 of 10
An intruder phones one employee at a company for harmless details, then cites them in a call to a second employee to sound credible. What technique is this?
Sample question 10 of 10
What is the principal reason TCP uses a three-way handshake?
Full CISSP question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
What this test covers
These 10 questions are drawn across the published exam blueprint rather than from one chapter: this set touches Security and Risk Management, Communication and Network Security, Identity and Access Management (IAM), Security Architecture and Engineering, Security Operations, Security Assessment and Testing, Asset Security, Software Development Security. Every question is original, written from the official objectives, and verified against a cited vendor page before it serves. None are recalled exam content, which is why the explanations can cite their sources.
A 10-question sample tells you where you stand, not whether you are ready. The full experience is numbered practice exams: 100 questions apportioned to the official domain weightings, sat under the real 180-minute clock and scored against the published cut score.
Other free ISC2 practice tests
Keep reading
- CISSP practice questions
Free sample questions with the full explanation on every answer.
- CISSP exam format
How many questions, how long, what the items look like, and how long it stays valid.
- CISSP passing score
The exact cut score, what kind of number it is, and the retake terms.
- How hard is CISSP?
An honest difficulty read from the format, the clock and the weights.
- What CISSP costs
The voucher price, the retake, and what renewal costs across the cycle.
- CISSP guide
Who it is for, study plans by experience level, and whether it is worth it.
Cheat sheets
Printable reference tables, free.