Free ISC2 CC mock exams
Full-length ISC2 Certified in Cybersecurity (CC) rehearsals: 100 questions in 120 minutes, drawn to the official domain weights and scored on the same scale as the real exam. Pass mark 700 / 1000.
- Questions
- 100~1.2 min each
- Time limit
- 120 minserver-timed
- Pass mark
- 700on a 100–1000 scale
- Papers
- 3retake any of them
More ways to rehearse
Every attempt draws questions you haven't met yet first · Pro.
A full-length paper drawn to the same domain weights, from the questions we rate hardest — the ones that combine two facts or weigh workable options against each other.
One exam domain at the real exam's pace — for the domain your last mock went worst in.
What's in a CC mock paper
Each paper draws its questions per domain in the same proportions ISC2 publishes for the real CC — so a mock that goes badly in one domain is telling you something a randomly-drawn quiz couldn't.
| Domain | Official weight | Questions drawn | Share of paper |
|---|---|---|---|
| Security Principles | 24% | 24 | 24% |
| Security Governance | 17% | 17 | 17% |
| Identity And Access Management (IAM) Concepts | 20% | 20 | 20% |
| Networking and Cloud Security Concepts | 22% | 22 | 22% |
| Security Operations and Incident Response | 17% | 17 | 17% |
| Total | 100% | 100 | 100% |
What a CC paper is shaped like
Which way this particular paper applies pressure.
The clock
At roughly 1.2 minutes a question, this is one of the faster papers you can sit. There is no time to deliberate: you read, decide, and move. Candidates who fail this format usually knew the material and ran out of clock, so treat pacing as a skill to rehearse in its own right rather than something that will sort itself out on the day.
The weighting
Security Principles is the largest domain at 24%, but with 5 domains in play no single one decides the result. A mock score here is usually a fair reflection of overall coverage rather than a verdict on one topic.
The standard
The pass mark is 700 on the 100–1000 scale. Because scaling adjusts for the difficulty of the particular set you were served, there is no fixed number of questions that guarantees it — which is exactly why a single mock result means less than a consistent one.
Pacing a CC paper
Where you need to be on the clock, quarter by quarter.
| Checkpoint | Elapsed | Be at question | Questions left |
|---|---|---|---|
| First quarter | 30 min | 25 | 75 |
| Halfway | 60 min | 50 | 50 |
| Three quarters | 90 min | 75 | 25 |
| Time called | 120 min | 100 | 0 |
What trips people up on a CC mock
CC is vendor-neutral, and that changes how questions are answered. There is no product behaviour to fall back on — answers follow from principles and from standard terminology used precisely. Candidates with practical security experience often score worse than they expect because they answer from what their organisation does rather than from what the framework says.
The paper is long in question count relative to its clock, and the questions are short. That combination rewards rhythm: read, answer, move. Deliberating on a definitional question is almost always wasted time, because either you know the term or you do not.
Security principles is the largest domain and underpins the rest, so a weak score there tends to depress everything else. If a mock goes badly across the board, start there rather than trying to fix each domain separately.
Governance and incident-response questions are where practical experience most often misleads. The exam expects the textbook sequence and the textbook role definitions, not the pragmatic version most organisations actually run. If you are missing questions you feel certain about, this mismatch is the usual cause.
The paper is long enough that stamina is a genuine factor, and it is one a mock is uniquely good at revealing. Watch where in the paper your errors cluster: a clean first half and a ragged last quarter is a pacing and concentration problem, and it is fixed by sitting more full-length papers rather than by more revision.
Before you sit a CC mock
CC mock exams: your questions
Source
Exam structure, domain weights and scoring on this page come from the official CC exam guide.