CAT Pacing and 100-125 Item Strategy
Key Takeaways
- The current ISC2 CC exam uses computer adaptive testing with 100 to 125 items in a 2-hour appointment.
- The passing grade is 700 out of 1000, but that should not be converted into a simple percentage.
- Pacing should protect time for every item because CAT delivery does not reward spending too long on one question.
- Answer the question asked, eliminate distractors, and choose the best response for the scenario.
- No public pass-rate claim is needed or appropriate for exam readiness planning.
CAT Pacing and Item Strategy
The final review period should reflect the real exam format. The current ISC2 CC outline is effective October 1, 2025, and a new outline becomes effective September 1, 2026. The current exam uses computer adaptive testing, allows 2 hours, includes 100 to 125 items, and uses a 700 out of 1000 passing grade. The five domain weights are 26 percent, 10 percent, 22 percent, 24 percent, and 18 percent. The 1MCC enrollment period ends May 20, 2026, and unexpired codes are usable by December 31, 2026. Do not rely on public pass-rate claims, and do not convert the passing grade into a simple percentage.
Pacing Reality
Two hours is 120 minutes. If you receive 100 items, the average is about 72 seconds per item. If you receive 125 items, the average is about 58 seconds per item. That does not mean every item deserves exactly one minute. Some definition questions may take 20 seconds. Some scenarios may take 90 seconds. The goal is to prevent a few difficult questions from consuming the time needed for many answerable ones.
Exam Strategy Table
| Situation | Practical response |
|---|---|
| You recognize the concept immediately | Answer carefully and move on |
| Two answers look possible | Re-read the last sentence and choose the one that directly answers it |
| A scenario has extra details | Identify asset, threat, impact, and requested action |
| You are tempted to choose the most advanced tool | Check whether a simpler policy, process, or control fits better |
| You do not know a term | Eliminate clearly wrong options and choose the best remaining answer |
CAT questions should be treated as one-way decisions unless the testing interface explicitly allows review, and candidates should not build a strategy around returning later. Read carefully, decide, and keep momentum. The question often asks for the best, first, most likely, or most appropriate action. Those words matter.
Reading Scenarios
Use a short internal script:
| Step | Question |
|---|---|
| 1 | What is the main problem? |
| 2 | Which domain is being tested? |
| 3 | Is the question asking identification, prevention, response, or recovery? |
| 4 | Which answer fixes the stated issue without adding unnecessary risk? |
Example: "A user can reach an internal server by IP address but not hostname after connecting to VPN." Do not choose a firewall upgrade just because the scenario mentions networking. The clue is name resolution, so internal DNS assignment or DNS suffix configuration is likely. Example: "An attacker changes invoice routing numbers." The issue is integrity, not availability. Example: "A contractor still has access after the project ended." The issue is account lifecycle management and least privilege.
Timing Discipline
At item 25, you should not be near the end of the clock. At item 60, you should still have enough time to handle the possibility of 125 items. If you are stuck, spend one deliberate pass eliminating wrong answers, choose the best remaining option, and continue. Anxiety often pushes candidates to reread a question five times. A better method is to mark the decision point: "The question asks for first response; active compromise means containment." Then answer.
The final goal is not speed alone. It is steady accuracy under time pressure. Practice with mixed questions, not only domain-by-domain drills, because the real experience may shift quickly from access control to network threats to business continuity.
What is the current ISC2 CC exam length and item range?
Which statement about the passing grade is appropriate?
A scenario includes many details, but the final sentence asks for the first action during active malware spread. What should guide your answer?