CISSP CAT Exam Format: What Changed and What to Expect
The CISSP is now a computer adaptive test: 100 to 150 items, up to 3 hours, passing at 700 of 1000. Here is how the CAT format works, what changed, and how to prepare for it.
The CISSP is a computer adaptive test: 100 to 150 items in up to 3 hours, passing at 700 out of 1000, per ISC2. If you have seen other numbers, that is the problem this article solves. Search "how many questions is the CISSP" and you will find pages claiming 125 to 175, others claiming 100 to 125, and older ones claiming 250 over 6 hours. Most of them are describing a version of the exam that no longer exists.
Here is the current format, straight from ISC2, plus a clear history of what changed and when, so you can spot the stale pages and prepare for the exam you will actually sit.
Quick takeaways
- The CISSP English (and now all-language) exam is a computer adaptive test (CAT): a minimum of 100 and a maximum of 150 items, up to 3 hours, per ISC2.
- The passing score is 700 out of 1000, a scaled score. There is no fixed percentage of questions you must get right.
- The exam adapts: answer well and it serves harder questions; miss and it eases off, then estimates your ability from the pattern. You cannot go back to a previous question.
- The old numbers (250 questions, 6 hours) describe the retired linear exam. Any 125-to-175 figure predates the current 100-to-150 range.
- As of April 15, 2024, all CISSP exams worldwide use the CAT format, not just English.
- PrepClubs' CISSP practice builds the steady, careful answering the adaptive format rewards, across all eight domains.
- PrepClubs is independent prep material and is not affiliated with or endorsed by ISC2.
What computer adaptive testing means
In a linear exam, everyone gets the same fixed set of questions in order, and you can skip and return. A computer adaptive test works differently. It starts you at a moderate difficulty, and after each answer it re-estimates your ability and picks the next question accordingly. Answer correctly and the next item is harder. Miss and the next is easier. The engine is not trying to be cruel; it is homing in on your true ability level as efficiently as possible.
Two consequences matter on test day. First, you cannot go back. Once you answer, that question is locked and the next one is chosen based on it. Second, rising difficulty is a good sign, not a bad one. If the questions feel relentlessly hard, the engine likely thinks you are performing above the passing standard and is pushing to confirm it. Candidates who do not understand this panic when the exam gets harder, which is precisely backwards.
The current format, per ISC2
Here is the exam as ISC2 defines it today.
| Attribute | CISSP CAT |
|---|---|
| Format | Computer adaptive testing (CAT) |
| Number of items | Minimum 100, maximum 150 |
| Time limit | Up to 3 hours |
| Passing score | 700 out of 1000 (scaled) |
| Question types | Multiple-choice and advanced innovative items |
| Domains covered | All 8 |
The exam ends when the engine is statistically confident you are above or below the passing standard, or when you hit 150 items or the 3-hour limit. This is why one candidate finishes at 100 items and another at 150: it is not that one got an easier exam, it is that the engine reached confidence sooner. Finishing at 100 tells you nothing about pass or fail on its own.
What changed, and why the old numbers persist
The confusion online is a history problem. The CISSP exam has changed format several times, and stale pages preserve each old version.
| Era | Format | Questions | Time |
|---|---|---|---|
| Before December 2017 | Linear (fixed form) | 250 | 6 hours |
| December 2017 onward (English) | CAT | 100 to 150 | 3 hours (originally up to 4) |
| June 2021 onward | CAT | 100 to 150 | 3 hours |
| April 15, 2024 onward | CAT, all languages | 100 to 150 | Up to 3 hours |
The takeaways: the "250 questions, 6 hours" figure is the pre-2017 linear exam. Any "125 to 175" range is out of date; the current range is 100 to 150. And as of April 15, 2024, ISC2 moved every language to CAT, so the exam is now adaptive no matter where or in what language you take it. When you see conflicting numbers, trust the current ISC2 outline, which says 100 to 150 items in up to 3 hours.
How the CAT format should change your prep
The adaptive format rewards a specific kind of preparation.
- Answer carefully and early. Because early questions calibrate the engine and you cannot revisit them, there is no "come back to it later." Read each question fully, eliminate wrong options deliberately, and commit. Rushing the first block hurts more here than on a linear exam.
- Build breadth, not depth. The engine draws from all eight domains, and a weak domain will surface as harder-feeling questions you cannot recover from by leaning on a strong one. Consistent competence across all eight is the goal.
- Practice steady pacing, not speed. Three hours for up to 150 items is roughly 72 seconds per question, but you will not use it evenly. Some items are quick, some need thought. Practicing full sets teaches you to spend where it matters without watching the clock in a panic.
- Get comfortable with rising difficulty. Do practice sets that push you, so that harder questions feel normal rather than alarming on the day.
FAQ
How many questions are on the CISSP exam?
A minimum of 100 and a maximum of 150 items, per ISC2. The exact number varies by candidate because the adaptive engine ends the exam once it is confident of your result.
How long is the CISSP CAT exam?
Up to 3 hours, per ISC2. It can end earlier if the engine reaches a confident pass or fail decision, or if you reach the 150-item maximum.
What is the passing score for the CISSP?
700 out of 1000, a scaled score, per ISC2. Because it is scaled and adaptive, there is no fixed percentage of questions you must answer correctly.
Is the CISSP still 250 questions and 6 hours?
No. That was the retired linear exam used before December 2017. The current CISSP is a computer adaptive test of 100 to 150 items in up to 3 hours.
Can you go back to previous questions on the CISSP CAT?
No. In the adaptive format, each answer determines the next question, so once you answer, it is locked. Read carefully and commit; there is no returning to change an answer.
Is the CISSP adaptive in all languages now?
Yes. As of April 15, 2024, ISC2 delivers the CISSP in CAT format in all languages worldwide, not just English.
Why did my exam end at 100 questions?
Because the adaptive engine reached a confident decision early. Ending at 100 items does not indicate a pass or a fail on its own; the engine simply had enough evidence about your ability.
Related on PrepClubs
- The 8 CISSP domains explained: the breadth the adaptive engine draws from, with 2024 weightings.
- How hard is the CISSP, really: why technical people fail, and the honest difficulty read.
- CISSP practice questions: why rationale depth beats a bigger dump on this format.
- Security+ practice test: the entry-level cert most people hold before CISSP.
Prepare for the format you will actually sit
The CISSP CAT rewards steady, careful answering across all eight domains, and no amount of memorizing a bigger question pool substitutes for that. PrepClubs' CISSP track is built to develop it: original, scenario-level questions across all eight domains, each with a written rationale that teaches the reasoning the adaptive exam is measuring, plus a free diagnostic to find your weak domains before you spend a cent. It is a one-time purchase with 30 days of access, not a renewing subscription you rent by the year. If you prepare with PrepClubs and do not pass your real test, we extend your access at no extra cost. No fine print. PrepClubs has helped more than 1,600 students prepare for cognitive and certification assessments. Start with the free CISSP diagnostic.
FAQ
