A CISSP practice examination · five books and an app · from $39

750 CISSP questions that read like the real exam.

The Eight Domains is a practice examination for the CISSP. 750 questions written the way the exam writes them, each one set in a company with something at stake, and a reason on every wrong answer. It comes as five printable books for $39, or the same five plus the free practice app on this site unlocked to all 750 for $69. You learn to pick the better of two good answers, which is what the exam scores, and you practice it at your kitchen table before the day that counts.

750 questions

500 domain drills, and two full-length mock exams to sit under a timer

Every miss

tells you why the answer you liked was the weaker call

292 lessons

one per objective on the 2024 outline, and each miss names the one to read

Revision sheets

one page per domain, the only paper you carry in the night before

Why these questions

Written the way the exam asks

The exam asks for judgment: who owns the risk, which control comes first. Three things make these questions train that.

Decisions, not definitions

Each question is a business decision with something at stake.

Most free apps ask whether you remember what an acronym stands for. The real exam assumes you know the term and tests whether you know who owns the risk, which control comes first, or when a compensating control is acceptable. These questions make you read like a risk manager, not a technician.

No guessing tells

A balanced answer key across all 750 questions.

In amateur banks "A" wins far more often than chance, and you learn the tell without meaning to. The real exam takes it away. Measured here: A 24.8%, B 26.0%, C 25.6%, D 23.6%. The only way through a question is the rationale.

Rooted in primary sources

Every explanation cites the governing standard.

NIST SP 800-53 Rev 5, ISO/IEC 27001 and 27002:2022, FIPS, OWASP, the RFCs. When an answer here contradicts something you read on a forum, you can check the source in sixty seconds instead of carrying the doubt into the exam.

What you are buying

Five books, and the app that serves them

A practice examination in three parts. The drills and the mock exams find the gap. The study guide closes it. The revision sheets are what you carry in. A miss in one names the page in the next, so you are never hunting for what you got wrong.

Step one · Practice

500 drills,
two mock exams

Book Two is 500 questions across the eight domains, weighted the way the exam weights them. Books Three and Four are two full-length mock exams of 125, to sit under a timer with a printable answer sheet. Every question is set in a company with something at stake, and when you miss one, the review says why the answer you liked was the weaker call.

  • Drills weighted the way the exam is, so the hours go where the marks are
  • Two full-length mock exams of 125, sat under a timer and marked at the end
  • Every miss labeled with why it lost: right control, wrong problem; wrong scope; wrong phase; symptom, not cause
Books Two to Four · 791 pagesIncluded

Step two · Learn

A lesson for
every objective

Book One is a lesson for each of the 292 objectives on the 2024 outline, in ISC2’s own order. When a question catches you out, its review names the lesson that covers it. You read that one and go back to the drills. Every claim in it names the standard it came from, so anything that surprises you takes a minute to check.

  • One lesson per objective, none skipped
  • A miss sends you straight to the lesson, so you never go hunting
  • 140 pages, short enough that you will actually finish it
Book One · 140 pagesIncluded

Step three · Walk in ready

One page
per domain

Book Five is for the night before. You will not open a study guide then, and you should not. Cover the right-hand column with your thumb, work down the page, and you know what you still do not know while there is time to do something about it.

  • One page per domain, the heaviest read last
  • Formulas and ordered models where you look first
  • Doubles as the glossary. The only paper worth carrying in.
Book Five · 10 pagesIncluded

The five books

$39

Five PDFs. Print them, write on them, keep them.

  • 500 domain drills, weighted the way the exam is
  • Two full-length mock exams of 125, with printable answer and scoring sheets
  • The study guide: a lesson for every objective on the 2024 outline
  • The revision sheets: one page per domain, the cheat sheet you carry in
  • A reason on every wrong answer, across all 750 questions
Recommended

The books and the app

$69

The same five PDFs, plus a licence key for the practice app.

  • Everything in the five books
  • All 750 questions in the app, in place of the free 160
  • Both mock exams under a timer, marked at the end
  • Practice weighted to the domains you keep missing
  • Works offline, on up to five devices

One payment, no subscription. Same five books either way. Instant download, 30-day money back.

Start with 160 free. Then the other 590.

The free app on this site serves 20 questions in every domain. 5 in each are open straight away, and a free email signup opens the rest. No account and no card. They are drawn from the same 750, at the same difficulty, with the same reason on every wrong answer, so read a few and see whether they feel like the exam you are about to sit. When you can clear them, the examination is where you go on: the 590 questions you have not seen, two full-length mock exams under a timer, the lesson behind every miss, and one page a domain for the night before.

Written by Bill Friend, CISSP, 20+ years in banking and payments security. He wrote the book he wanted while he was preparing for the same exam.