CISSP Exam Format: 100 to 150 Adaptive Items, 3 Hours, and How the 700 Pass Line Works

Every CISSP candidate sits a different exam. ISC2 delivers the CISSP only as a computerized adaptive test (CAT), so the items you see, and how many, depend on your answers. The rules that govern it are public, and knowing them changes how you pace yourself. This guide covers the outline effective April 15, 2024; ISC2's outline for exams from April 15, 2027 lists the same length, item count, item format and passing grade.

CISSP exam format at a glance

Sources: ISC2's CAT page, the outline summary and the languages page, checked on October 27, 2026.

How the CISSP adaptive algorithm chooses your items

ISC2 describes the process step by step:

1. The first item is easy. Each candidate starts with an item well below the passing standard.
2. Your ability is re-estimated after every answer, based on the difficulty of all items so far and how you answered them.
3. The next item is aimed at you. The algorithm picks an item you have roughly a 50% chance of answering correctly.
4. The estimate gets sharper with each item, until the exam can stop.

Two consequences matter. Every item feels challenging, because it's chosen to be. And content still follows the outline: ISC2 says items aren't grouped into sections or presented in a fixed order, but each exam is built to the published domain weights whatever its length.

The Candidate Information Bulletin adds a point that calms many candidates: an item that seems very similar to an earlier one doesn't mean you got the first one wrong. It may cover a different phase of the same process, or be an unscored pretest item.

The three rules that end a CISSP exam

ISC2's CAT FAQ lists three rules, applied in this order:

That condition is the one rule worth memorizing: if you haven't answered at least 75 scored items and the 25 pretest items when time runs out, you automatically fail. In practice, that means you must reach at least 100 items within three hours. ISC2 also says no candidate is randomly selected for a 150-item exam: the length depends only on your answers and the outline.

What the length of your exam does and doesn't tell you about your result is covered in the CISSP results and retake guide.

What 700 out of 1000 means on the CISSP

The 700 is a scaled score, not a percentage. ISC2's scoring FAQ explains its 0 to 1000 scale with a temperature analogy: the same result expressed on a different scale, like Fahrenheit and Celsius, so the passing score stays 700 whichever form you take. That explanation is written around ISC2's linear exams. On the adaptive CISSP, the pass or fail decision comes from the ability estimate described above, and the outline states the passing grade as 700 out of 1000 points.

Four points follow, all from ISC2:

• 700 isn't 70% correct. On a CAT exam, ISC2 says everyone is expected to get about 50% of items right. What separates a pass from a fail is the difficulty of the items you answer correctly, not the count.
• You never see the number. ISC2 reports pass or fail only. Candidates who fail get a proficiency level for each domain, not a score.
• Domains compensate for each other. The CISSP is a compensatory exam: one pass/fail result is calculated on all scored items, so strong performance in a heavily weighted domain can offset weaker performance in a lighter one. ISC2 adds there's no guarantee.
• You don't need "above proficiency" in every domain to pass. ISC2 says so directly in its CAT FAQ.

CISSP item types: what "advanced items" means

ISC2's outline lists "multiple choice and advanced item types." Its exam-prep page and the bulletin describe what that can include:

• standard multiple choice
• calculation items
• ordered response (putting steps in sequence)
• drag and drop
• hot spots (clicking a point on an image or diagram)
• scenario-based and even video-based items
• charts and tables inside any item type

Pearson VUE offers a demo of its testing interface, but the bulletin warns that not every question type or feature in it applies to ISC2 exams. Treat it as a tour of the screen, not a CISSP sample.

Calculation items are where a worked explanation helps most, because one slip in the formula decides the answer. The explanations planned for full CISSP prep work arithmetic such as ALE step by step, and the free set already includes an ALE item.

Pacing 150 items in 180 minutes

If your exam runs to the maximum, you have 1.2 minutes per item (180 ÷ 150, Passy's arithmetic), and less once you take breaks. ISC2 doesn't limit the number or length of breaks, but they all come out of the three hours, and the bulletin says each break involves a palm vein scan on the way out and back in.

A simple checkpoint plan, as Passy's suggestion rather than an ISC2 rule:

Being ahead of these marks is fine; there's no minimum time. Falling well behind is the risk, because of the automatic fail if you haven't reached 100 items when time ends. Since you can't go back, the cost of overthinking an item isn't a second look later; it's time taken from the items still to come.

Pacing is a skill you can rehearse. Full CISSP prep planned for launch adds a timed 150-item mock exam for that, and in the meantime the 20 free CISSP practice questions let you time yourself on a short set.

Preparing for an adaptive CISSP exam

ISC2 says preparation shouldn't change because the exam is adaptive: the outline and passing standard are the same as they were for the linear version. What changes is how the exam feels. Practice for these conditions:

• Commit to an answer. With no review, drill reading the question stem's qualifier (first, best, most) before you look at the options.
• Cover every domain. Each exam follows all eight domain weights, so skipping a domain is never safe.
• Expect discomfort. If most items feel hard, that's how a CAT exam is designed, and it says nothing on its own about how you're doing.

If you want a rough sense of how question counts map to the domains, you can see how the planned CISSP question bank is split across the eight domains. The CISSP study plan guide turns those weights into weekly hours, and the difficulty guide explains why experienced practitioners still find the exam tough.