How Many Questions Are on the CISSP Exam? CAT Length and Time Explained
The English CISSP CAT exam has 100 to 150 questions in up to 3 hours; the non-English linear format has 250 questions in 6 hours. Here is exactly how it works.
The English CISSP exam uses computerized adaptive testing (CAT) and contains 100 to 150 questions, which you must complete in up to 3 hours, per ISC2. The exact number you see depends on your performance: the exam adapts to your answers and can end as early as 100 questions once it has enough evidence to decide the outcome. The non-English linear version is different: 250 questions in up to 6 hours. If you are testing in English, plan for the adaptive format, not the old 250-question one that still shows up in outdated guides.
That variable range confuses a lot of candidates, because "how many questions" does not have one fixed answer. This guide gives you the real numbers, why they differ, and what the range means for how you pace yourself on exam day.
English CISSP CAT: 100 to 150 questions in up to 3 hours
Quick takeaways
- The English CISSP CAT exam is 100 to 150 questions in up to 3 hours, per ISC2.
- The exam is adaptive: it can end at 100 questions if it has already decided your result.
- The non-English linear format is 250 questions in up to 6 hours, per ISC2.
- At least 75 of the CAT questions are scored; up to 25 are unscored pretest items you cannot identify.
- You pass with a scaled score of 700 out of 1000, across eight domains, per ISC2.
- The variable length rewards steady accuracy from question one. The PrepClubs CISSP pack is one-time, 30-day access, with a 30-day Pass Guarantee.
The direct answer: 100 to 150 questions
If you are sitting the English CISSP exam, you will answer somewhere between 100 and 150 questions, and you have up to 3 hours to do it, per ISC2. There is no single fixed count, because the exam is adaptive. It selects your next question based on how you answered the previous ones, and it stops as soon as it has enough statistical confidence to determine whether you have passed or failed. A strong, consistent performance can end at the 100-question minimum. A borderline performance may run all the way to 150.
Why the number varies: how CAT works
Computerized adaptive testing does not hand every candidate the same fixed test. After each answer, the engine re-estimates your ability and picks a next question calibrated to that estimate. When your running result is clearly above or clearly below the passing standard, the exam has its answer and ends. When you are near the line, it keeps asking harder questions to resolve the uncertainty, which is why borderline candidates tend to see more questions.
A practical consequence: reaching question 150 is not automatically bad, and ending at 100 is not automatically good. The count reflects how quickly the engine reached confidence, not your final grade. Do not try to read your performance from the number of questions the screen shows you.
Scored versus unscored questions
Not every question you answer counts toward your score. On the CAT exam, at least 75 questions are operational (scored) items, and up to 25 are pretest (unscored) items that ISC2 is trialing for future exams, per ISC2. You cannot tell which is which, and you should not try. Answer every question as if it counts, because the ones that count are indistinguishable from the ones that do not.
Here is the format at a glance:
| Format | Questions | Time | Passing score |
|---|---|---|---|
| English (CAT) | 100 to 150 | up to 3 hours | 700 out of 1000 |
| Non-English (linear) | 250 | up to 6 hours | 700 out of 1000 |
The 250-question myth
A lot of older material, and some current pages that have not been updated, still describe the CISSP exam as 250 questions over 6 hours. That is the linear format, which ISC2 uses for non-English versions of the exam, not the English CAT format most candidates take today. If your study resource tells you to prepare for 250 questions in English, it is out of date. The English exam moved to adaptive testing years ago, and the current outline confirms the 100 to 150 range, per ISC2. Trusting the wrong number affects your pacing strategy, so it is worth getting right.
What the range means for pacing
Because the exam can end anywhere between 100 and 150 questions, you cannot pace yourself against a fixed finish line. Two rules keep you safe:
- Do not rush the early questions. Adaptive exams weight your early answers heavily when forming the initial ability estimate. Careless mistakes in the first 30 questions can send the engine down a harder path and cost you time and confidence.
- Do not bank time for a sprint at the end. There may be no end to sprint toward. Answer each question deliberately, at a steady pace of roughly 90 to 120 seconds, and trust that the exam will stop when it is ready.
You also cannot skip and return to questions on the CAT exam. Once you submit an answer, you move on. That makes first-pass accuracy the entire game.
The eight domains behind the questions
However many questions you see, they are drawn from eight domains, weighted by the 2024 exam outline, per ISC2: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, and Software Development Security. Security and Risk Management is the heaviest domain, so it deserves the most study time. The adaptive engine will pull from all eight regardless of how long your exam runs.
Real example: two candidates, two question counts
Consider two people who both pass. The first answers the early questions cleanly, the engine quickly gains confidence that she is above the standard, and her exam ends at 108 questions in about two hours. The second is stronger in some domains than others, hovers near the line for a while, and the engine keeps probing until it resolves the uncertainty at question 147, close to the full 3 hours. Both walk out certified. The lesson is that the question count told them nothing about the result while they were testing, so neither should have tried to interpret it mid-exam. Steady, accurate answering is what got both across the line.
How practice prepares you for a variable-length exam
You cannot rehearse the exact adaptive path, but you can build the one thing the format rewards: consistent, first-pass accuracy across all eight domains. That comes from working a large, realistic question bank until your weak domains are no longer weak. On PrepClubs, the CISSP practice pack gives you full-length practice plus domain drills so you can find and close the gaps that would otherwise push you toward the 150-question ceiling. It is a one-time payment, not a subscription, with 30 days of access and a 30-day Pass Guarantee: prepare with it and if you do not pass, we extend your access at no extra cost.
Related on PrepClubs
- The CISSP CAT exam format, start to finish
- CISSP full-length practice and domain drills
- CISSP pack pricing and the 30-day Pass Guarantee
FAQ
How many questions are on the CISSP exam?
The English CISSP exam uses adaptive testing and contains 100 to 150 questions, completed in up to 3 hours, per ISC2. The exact count depends on your performance, since the exam ends once it can determine your result. The non-English linear format is 250 questions in up to 6 hours.
How long is the CISSP exam?
Up to 3 hours for the English CAT exam, and up to 6 hours for the non-English linear exam, per ISC2. Most English candidates finish well before the full 3 hours because the adaptive format can end early.
Are all CISSP questions scored?
No. On the CAT exam, at least 75 questions are scored operational items and up to 25 are unscored pretest items, per ISC2. You cannot identify which is which, so answer every question as if it counts.
What is the passing score for CISSP?
700 out of 1000 on a scaled scoring system, per ISC2. The score is scaled rather than a raw percentage, and it applies to both the CAT and linear formats.
Can I skip questions and come back on the CISSP exam?
No. On the adaptive CAT exam you must answer each question before moving on, and you cannot return to a previous question. This makes first-pass accuracy essential, so read carefully and commit to your best answer.
Is the CISSP still 250 questions?
Only the non-English linear format is 250 questions. The English exam uses computerized adaptive testing with 100 to 150 questions, per ISC2. Guides that describe the English exam as 250 questions are out of date.
Note: PrepClubs is an independent practice-test provider and is not affiliated with, endorsed by, or sponsored by ISC2. CISSP is a trademark of ISC2. All exam format, question-count, timing, and scoring details are set by ISC2 and cited to ISC2's official exam outline; confirm current details with ISC2.
FAQ
