Certified in Cybersecurity Practice Exams
CCISC2's entry-level cybersecurity certification. Proves foundational knowledge of security principles, business continuity and incident response, access controls, network security, and security operations — no work experience required.
Start preparing today
5 flashcard sets · 5 learning tests · 2 timed exams · 120-question bank
Overview
What this certification is and how the exam works.
The ISC2 Certified in Cybersecurity (CC) is the ideal first credential for anyone starting a cybersecurity career. It requires no prior work experience and validates foundational knowledge across five domains: Security Principles (26%); Business Continuity, Disaster Recovery & Incident Response Concepts (10%); Access Controls Concepts (22%); Network Security (24%); and Security Operations (18%). The exam is 100 multiple-choice items in 2 hours with a passing score of 700/1000. Earning CC also makes you an ISC2 member, opening a path toward SSCP and CISSP.
Why should I take the exam?
What this credential does for your career.
- 1The best-recognized entry-level cybersecurity certification — no experience or degree required
- 2Backed by ISC2, the body behind the CISSP, and often available with free training and a free first exam attempt
- 3Covers the exact vocabulary and concepts every SOC analyst, IT admin, and security newcomer must know
- 4A stepping stone: CC → SSCP → CISSP is a proven career ladder in security
Skills measured
What you need to know to pass this exam.
- ✓Apply the CIA triad — confidentiality, integrity, availability — and non-repudiation to everyday scenarios
- ✓Understand risk management: threats, vulnerabilities, likelihood, impact, and risk treatment options
- ✓Distinguish administrative, technical, and physical security controls
- ✓Explain business continuity, disaster recovery, and incident response plans and their key metrics (RTO, RPO)
- ✓Apply access control principles: least privilege, need to know, separation of duties, and defense in depth
- ✓Compare access control models — DAC, MAC, and RBAC — and physical access controls
- ✓Describe networks (OSI/TCP-IP, ports, IP addressing) and threats against them (DoS, on-path, spoofing)
- ✓Explain network defenses: firewalls, IDS/IPS, VPNs, segmentation, and zero trust
- ✓Handle data securely through its lifecycle: classify, retain, encrypt, hash, and destroy
- ✓Support security operations: hardening, patching, change management, logging, and security awareness
About our CC practice exams
Our Certified in Cybersecurity CC question bank holds 120 exam-style questions with a written explanation on every answer, mapped to the five exam domains published for CC, covering Security Principles, Business Continuity, Disaster Recovery & Incident Response, Access Controls Concepts, Network Security and Security Operations.
Alongside the bank there are two full-length timed exams at the real 120-minute limit and 70% pass mark, plus five topic-based learning tests for working a single domain at a time. Randomised mock exams are dealt on demand from the full 120-question pool, so you never run out of fresh papers.
- Questions
- 120
- Exam domains
- 5
- Timed exams
- 2
- Pass mark
- 70%
How our practice content is created
Practice questions are independently developed using the official ISC2 CC exam guide and ISC2 documentation. Each question is checked for alignment with the current exam objectives and reviewed for technical accuracy before publication.
The CC bank cites 1 distinct ISC2 documentation page, and every question links the source it was written against — so you can check any answer at first hand.
Official CC exam guideISC2 is a trademark of its respective owner. This is an independent study resource and is not affiliated with, endorsed by, or authorised by ISC2.
Related certifications
Credentials that pair well with this exam or come next on the path.
Official resources
Provider documentation and study material for this exam.
5 flashcard sets · 5 learning tests · 2 timed exams · 120-question bank