Doc CC-10Rev 2026-10Class study materialRead ~3 min
About this CISSP practice site
CISSP CAT Practice is an independent study site for the ISC2 CISSP (Certified Information Systems Security Professional) exam, run by the small team that builds a CISSP exam-prep app for iOS and Android. It is not run by ISC2, and nobody here is presented as a famous instructor.
Who is behind it
A small team that writes practice items, checks them and builds the software around them. You will not find a stock photo of a smiling expert in a blazer, a wall of invented credentials, or a founder story about the night everything changed. What you get is the work itself: a 60-item practice test, a domain-by-domain study guide and a study plan, all free and without an account.
The site covers the outline that took effect on April 15, 2024: eight domains, from Security and Risk Management at 16% down to Asset Security and Software Development Security at 10% each. Exam facts come from what ISC2 publishes; anything that changes often, such as fees and policies, is linked to isc2.org rather than copied here and left to go stale.
How a practice item gets onto the site
Every item on this site went through the same four stops. None of them is glamorous, which is roughly the point.
Step 01
Written as an original scenario
Each item is written for practice and mapped to one of the eight domains of the 2024 outline. Nothing is lifted from a live exam; the exam content is under a confidentiality agreement, and the items here never claim otherwise.
Step 02
Solved blind
Before publishing, someone answers the item without seeing the key. If their answer and the key disagree, the item goes back for a rewrite — usually because two options were defensible, and a practice item with two right answers teaches nothing.
Step 03
Every option gets a note
All four options carry their own explanation: why the keyed answer is the best fit and why each of the other three is wrong here. A common CISSP miss is picking a statement that is true but answers a different question, and the notes are where that shows.
Step 04
Filed into one set
Each item lives in exactly one place on this site — the practice test, the sampler on the home page, or a domain guide’s deck — so you never meet the same scenario on two pages.
What this site is, and what it is not
| Question | Answer |
|---|---|
| Affiliated with ISC2? | No. CISSP is a registered mark of ISC2, used here only to name the exam. ISC2 has not reviewed or approved anything on this site. |
| A training provider? | No. There are no courses, no bootcamps and no exam vouchers — just practice items, guides and a plan. |
| Does the console predict your score? | No. Timed 60 copies the pacing (72 minutes, no going back) but not CAT scoring, which ends on an ability estimate, not a count of right answers. |
| Where do exam facts come from? | ISC2’s published outline and exam pages, as of October 2026. Format details live on the exam page. |
| What does it cost? | Nothing. No sign-up, no paywall, no cookies. |
The app
The items on this site come from the same bank as our CISSP prep app, which carries far more of them and is easier to fit into a commute than a laptop. The “Get the app” buttons send you to the App Store or Google Play through a link on this domain; what that link records is spelled out on the privacy page.
Found a wrong key, a muddled note or an outdated fact? The contact page explains how to tell us. Corrections are the cheapest quality control there is, and we would rather hear it from you than from the next person who gets the same item wrong.