العربية

CISSP

CISSP Certification Exam

Practise the eight CISSP domains with explanations for each option. The real exam is adaptive; this bank provides supplementary multiple-choice practice.

Try 10 free questions and see your levelTake a full mock exam

  • 500 questions in the bank
  • 150 questions in 180 minutes per site supplementary practice session
  • 16 flashcards

Every option explained so you understand why

If your exam were today, would you pass?

Try 10 free questions without signing up. Get your score and find your weak areas as soon as you finish.

During a client assessment, the client's CIO asks the assessor to omit a failed access-control test from the final report because remediation is already underway. What should the assessor do?

  1. A Retest after remediation and report only the retest result
  2. B Move the finding to a separate management letter at the client's request
  3. C Lower the finding's severity to reflect the remediation in progress
  4. D Report the failed test accurately and note the planned remediation

All 10 free questions with answers and an explanation for every option

700 out of 1000; not a raw percentage correct This is your practice accuracy. It cannot be converted to the exam’s scaled score or used to determine whether you pass.

What you get

  • 500questions in the bankPractise with the answer shown right away, or sit a full timed mock
  • 8unitsSplit by the exam syllabus
  • 16flashcardsTo lock in terms and definitions
  • 32quick review pointsEach unit in a few key lines

Unit map

  1. 01Security and Risk Management24 questions
  2. 02Asset Security15 questions
  3. 03Security Architecture and Engineering20 questions
  4. 04Communication and Network Security19 questions
  5. 05Identity and Access Management19 questions
  6. 06Security Assessment and Testing18 questions
  7. 07Security Operations20 questions
  8. 08Software Development Security15 questions

Exam facts

CISSP Certification Exam — Number of questions: 100–150 items (adaptive exam). Exam time: 180 minutes. Pass mark: 700 out of 1000; not a raw percentage correct. Calculator: Check the test center instructions before your exam. Exam fee: USD 749 in the Middle East; taxes depend on exam location. Source: ISC2 (Last verified: 2026-11-04). Question bank: A site supplementary practice session of 150 questions in 180 minutes with a result for every unit, plus 500 explained questions across 8 units, every option explained, a review of your mistakes, and two ways to practise: see the answer right away, or sit a full timed mock. Free questions: a 10-question diagnostic test covering the main units, no sign-up; at the end you get your score and your weakest units.

Exam code
CISSP
Exam language
English or English or English or English or English
Number of questions
100–150 items (adaptive exam) Source
Exam time
180 minutes Source
Pass mark
700 out of 1000; not a raw percentage correct Source
Calculator
Check the test center instructions before your exam Source
Exam fee
USD 749 in the Middle East; taxes depend on exam location Source

Last verified: 2026-11-04

Where other sources differ

  • The real exam uses CAT, lasts three hours and does not allow review after an answer is submitted. Site practice does not reproduce CAT or generate an ISC2 score.
  • Arabic here supports study. ISC2 lists English, Chinese, German, Japanese and Spanish as exam languages.
  • Content follows the 15 April 2024 outline. The next outline takes effect on 15 April 2027.

How to register

  1. Check the experience requirement: five cumulative years in at least two domains, with at most one year waived under ISC2 rules. You may pass the exam before completing experience and follow the Associate of ISC2 route.
  2. Create or sign into your ISC2 account and select CISSP and an exam purchase option.
  3. After purchase, open Courses and Exams and select Schedule. Enter your name exactly as shown on your identification.
  4. Complete the appointment through Pearson and check language, location, taxes and exam instructions.

Source

Exam body

ISC2: Official website: ISC2

Study guides

Frequently asked questions

Does 70% correct mean a CISSP pass?

No. ISC2 lists 700 out of 1000, and CAT evaluates ability against a passing standard. Your practice percentage does not directly convert to the official score.

Can I try CISSP questions for free?

Yes. Free questions: a 10-question diagnostic test covering the main units, no sign-up; at the end you get your score and your weakest units. The free practice test page lists the same questions with answers and an explanation for every option. The rest of the questions and the full mock exams come with a pass from SAR 26.

What makes this CISSP question bank different?

Question bank: A site supplementary practice session of 150 questions in 180 minutes with a result for every unit, plus 500 explained questions across 8 units, every option explained, a review of your mistakes, and two ways to practise: see the answer right away, or sit a full timed mock. Every question is reviewed and referenced, ready to practise on your phone. Try the free questions and read the explanations before buying full access.

Can I take CISSP in Arabic?

ISC2’s current language list does not include Arabic. You can study in Arabic here while practising English terminology and questions.

Is this an official site, and how do I pay?

It is an independent site, not part of Qiyas or any government body, and every question is reviewed before it is published. You pay once, with no automatic renewal, through Waffo Pancake (the merchant of record) by Visa, Mastercard, Apple Pay or Google Pay, and your statement shows "WAFFO". If you were charged twice or the pass did not open, email support@saudiexams.com.

Study material sample: Security and Risk Management

Summary

Security and risk management links security decisions to organizational impact. Establish business context and assessment scope, then evaluate threats, vulnerabilities, likelihood and impact. Buying a product does not replace risk analysis or decision ownership.

What the exam focuses on

  • Define purpose, scope, assumptions and information sources before selecting an assessment approach. [800-30r1, 3.1]
  • A threat can cause harm; a vulnerability is a weakness. Determine how they combine in a loss scenario. [800-30r1, 3.2]
  • Estimate likelihood and impact, making uncertainty explicit rather than presenting false numerical precision. [800-30r1, 2.3 and 3.2]

Common traps

  • A written policy alone does not establish that a control operates effectively.
  • Low likelihood does not make a severe impact irrelevant.

Try the flashcards

Tap a card to see the answer

What precedes conducting a risk assessment?

Establishing context, purpose, scope and assumptions.

Why maintain the assessment?

Threats, assets, controls and business needs change.

Why you can trust these questions

  • Published questions: 500. We reviewed every one before publishing it: the answer, the explanation of each option and the source.
  • Exam facts last checked against the organiser’s website: 2026-11-04. We check them again every three months and two weeks before each test.
  • Found a mistake? Tap "Report an error" under any question in the practice area, or email us at support@saudiexams.com
  • Independent website. Not affiliated with ETEC (Qiyas), the Financial Academy or any government body.

How we write and review content

See also: Engineering Exams