Courseiva
Free · No account needed · No credit card

(ISC)2 Information Systems Security Engineering Professional (CISSP-ISSEP, Aug 2025 blueprint) (ISC) Practice Test

332 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Real exam: 180 min
Pass mark: 700 out of 1,000

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Risk Managementmedium
Full explanation →

An ISSEP is conducting a quantitative risk assessment for a mission-critical database. The Annualized Rate of Occurrence (ARO) is 0.5, and the Single Loss Expectancy (SLE) is $100,000. What is the Annualized Loss Expectancy (ALE)?

A$200,000
$50,000Correct
C$500,000
D$100,000

The ALE is calculated by multiplying the SLE by the ARO (100,000 * 0.5 = 50,000).

Q2Risk Managementmedium
Full explanation →

An ISSEP is performing a supply chain risk assessment for an IOT-based sensor array. Which finding poses the highest systemic risk to the overall system integrity?

AThe sensor housing is not tamper-evident.
BThe sensors use an older version of Bluetooth.
The sensor firmware is not signed.Correct
DThe vendor does not provide a Service Level Agreement (SLA).

Supply chain integrity is compromised when the provenance of hardware or software cannot be verified, as this allows for the insertion of hardware Trojans or backdoors that bypass traditional security controls.

Q3Risk Managementhard
Full explanation →

You are assessing an Engineered System that utilizes a Trusted Platform Module (TPM) for secure boot. A scan reveals that the firmware version is outdated and susceptible to a known key-injection vulnerability. Which action should the ISSEP prioritize?

AUpdate the security policy to include manual verification of boot logs.
BConfigure an IDS to block unauthorized firmware update attempts.
CDisable TPM-based secure boot until the vendor releases a patch.
Perform a firmware update using the manufacturer's signed secure update process.Correct

Firmware vulnerabilities involving the TPM and secure boot chain represent a fundamental compromise of the root of trust. Remediation must prioritize the update of the firmware to restore the integrity of the secure boot sequence.

What's covered

Questions are tagged by exam domain. Practice a specific domain or mix them all.

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All ISC questionsISC exam guideStudy guidePractice by domain