200+ Free CC Practice Questions
Pass your ISC2 CC Certified in Cybersecurity exam on the first try — instant access, no signup required.
Which risk treatment strategy involves deciding that the cost of mitigation exceeds the potential loss?
Explore More ISC2 Certifications
Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.
More From This Family
Videos and articles for deeper review.
Key Facts: CC Exam
100-125
Exam Items
ISC2
700/1000
Scaled Passing Grade
ISC2
2 hours
Exam Duration
ISC2
US$199
Standard Exam Fee
ISC2
CAT
Exam Format
ISC2
None
Experience Required
Entry-level
ISC2 CC is a 2-hour CAT exam with 100-125 multiple-choice and advanced items, a 700/1000 scaled passing grade, and five weighted domains: Security Principles (26%), Business Continuity/DR/Incident Response (10%), Access Controls Concepts (22%), Network Security (24%), and Security Operations (18%). No prior work experience is required. The standard CC exam fee is US$199 in major ISC2 regions. Public enrollment in the One Million Certified in Cybersecurity program ends May 20, 2026; candidates with unexpired codes may schedule and test by December 31, 2026.
Sample CC Practice Questions
Try these sample questions to test your CC exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 200+ question experience with AI tutoring.
1Which of the following is the correct definition of confidentiality in the CIA triad?
2A company implements a system to verify that financial records have not been tampered with. Which security principle is being enforced?
3Which security principle is primarily concerned with ensuring systems and data are accessible to authorized users when needed?
4What type of security control is a firewall that blocks unauthorized network traffic?
5Which of the following BEST describes a preventive security control?
6A security guard monitoring building entrances represents which type of security control?
7Which of the following is an example of an administrative security control?
8In risk management, what term describes the process of identifying and evaluating potential threats to an organization?
9A company decides to purchase cyber insurance to offset potential financial losses from a data breach. Which risk treatment strategy is being used?
10According to the (ISC)² Code of Ethics, which of the following is a priority for certified professionals?
About the CC Exam
The ISC2 Certified in Cybersecurity (CC) is an entry-level cybersecurity certification for newcomers, career changers, students, and early IT professionals. The current CC exam outline is effective October 1, 2025, with a notice that a refreshed outline applies September 1, 2026. The exam uses Computerized Adaptive Testing (CAT), allows 2 hours, includes 100-125 multiple-choice and advanced items, and covers Security Principles, Business Continuity/Disaster Recovery/Incident Response, Access Controls Concepts, Network Security, and Security Operations.
Assessment
100-125 multiple-choice and advanced items
Time Limit
2 hours
Passing Score
700/1000 scaled score
Exam Fee
US$199 standard registration (ISC2 / Pearson VUE)
CC Exam Content Outline
Security Principles
Confidentiality, integrity, availability, authentication, non-repudiation, privacy, risk management, security controls, ISC2 Code of Ethics, governance, policies, procedures, standards, regulations, and laws
Business Continuity, Disaster Recovery, and Incident Response Concepts
Business continuity purpose and components, disaster recovery purpose and components, incident response purpose and components, resilience planning, recovery objectives, playbooks, and lessons learned
Access Controls Concepts
Physical security controls, monitoring, authorized versus unauthorized personnel, least privilege, segregation of duties, discretionary access control, mandatory access control, and role-based access control
Network Security
OSI and TCP/IP models, IPv4, IPv6, Wi-Fi, ports, applications, network threats and attacks, IDS/HIDS/NIDS, antivirus, scans, firewalls, IPS, segmentation, DMZs, VLANs, VPNs, micro-segmentation, defense in depth, NAC, IoT, and cloud service models
Security Operations
Encryption, hashing, data handling, destruction, retention, classification, labeling, logging, monitoring, configuration management, baselines, updates, patches, data handling policy, password policy, acceptable use, BYOD, change management, privacy policy, and awareness training
How to Pass the CC Exam
What You Need to Know
- Passing score: 700/1000 scaled score
- Assessment: 100-125 multiple-choice and advanced items
- Time limit: 2 hours
- Exam fee: US$199 standard registration
Keys to Passing
- Complete 500+ practice questions
- Score 80%+ consistently before scheduling
- Focus on highest-weighted sections
- Use our AI tutor for tough concepts
CC Study Tips from Top Performers
Frequently Asked Questions
What is the ISC2 CC exam format in 2026?
The current ISC2 CC exam uses Computerized Adaptive Testing (CAT). ISC2 lists a 2-hour time limit, 100-125 multiple-choice and advanced item types, a 700 out of 1000 passing grade, and Pearson VUE test-center delivery. The current outline is effective October 1, 2025, and ISC2 has posted a notice that a refreshed outline applies September 1, 2026.
Do I need experience for the ISC2 CC certification?
No. Certified in Cybersecurity is designed as an entry-level ISC2 certification with no professional experience requirement to sit for the exam. It is a fit for students, career changers, early IT workers, and candidates building a foundation before Security+, SSCP, or CISSP.
Is the ISC2 CC exam still free through 1MCC?
ISC2 announced on April 22, 2026 that public enrollment in the One Million Certified in Cybersecurity program will end on May 20, 2026. Candidates who already have unexpired exam codes may schedule and take the exam by December 31, 2026. After the program concludes, CC exam and education options are available for purchase like other ISC2 exams and courses.
What are the five domains of ISC2 CC?
The official CC domains are Security Principles (26%), Business Continuity, Disaster Recovery, and Incident Response Concepts (10%), Access Controls Concepts (22%), Network Security (24%), and Security Operations (18%).
How long should I study for the ISC2 CC exam?
Most new candidates should plan 40-80 focused study hours. Candidates with IT or security experience may need less, while complete beginners should spend extra time on networking basics, access control models, BC/DR/IR terminology, security operations vocabulary, and scenario-based practice.
Does ISC2 publish the CC pass rate?
No. ISC2 does not publish a public CC pass-rate percentage. A better readiness target is evidence-based: explain every official domain objective in your own words, score consistently on mixed practice sets, and review missed questions until you can identify why each wrong option is wrong.
What jobs can ISC2 CC help with?
CC is a foundation credential for entry-level cybersecurity and IT security support roles such as SOC analyst trainee, junior security analyst, help desk with security responsibilities, GRC coordinator, cybersecurity intern, and security operations support. It is strongest when paired with hands-on labs, networking fundamentals, and practice reading alerts, logs, policies, and access-control scenarios.