CISM
Can you pass this 10-question CISM quiz?
Ten multiple-choice questions: six on how the CISM exam works and four on what it covers. Tap an answer to see why, with the source. Takes about five minutes.
Can you get 10 out of 10?
1 of 10How many questions are on the CISM exam?
Show answer
Answer: C. 150 multiple-choice questions, one best answer. Source: ISACA, Exam Candidate Guide 2026
2 of 10How long do you have?
Show answer
Answer: D. Four hours. Source: ISACA, Exam Candidate Guide 2026
3 of 10On what scale does ISACA report your score?
Show answer
Answer: C. A scaled score from 200 to 800. Source: ISACA, Exam Candidate Guide 2026
4 of 10What score passes?
Show answer
Answer: B. 450 or higher. Source: ISACA, Exam Candidate Guide 2026
5 of 10Do the pretest items count toward your score?
Show answer
Answer: C. ISACA exams include unscored pretest items, and they do not count. Source: ISACA, Exam Candidate Guide 2026
6 of 10What are the domain-level results on your score report for?
Show answer
Answer: B. Domain-level results are provided for information only; the score comes from items answered correctly. Source: ISACA, Exam Candidate Guide 2026
7 of 10Which CISM domain carries the most weight?
Show answer
Answer: C. Information Security Program carries 33% under both the 2022 outline and the outline from 3 November 2026. Source: ISACA, CISM Exam Content Outline
8 of 10Which CISM domain carries the least weight?
Show answer
Answer: A. Governance: 17% up to 2 November 2026, and 18% from 3 November 2026. Source: ISACA, CISM Exam Content Outline
9 of 10What two content areas does the CISM outline add from 3 November 2026?
Show answer
Answer: B. ISACA's press release of 10 September 2026 names enterprise architecture and information security architecture. Source: ISACA press release, 10 September 2026
10 of 10What weight does Information Security Risk Management carry?
Show answer
Answer: B. 20% of the exam, under both the 2022 outline and the outline from 3 November 2026. Source: ISACA, CISM Exam Content Outline
CISM flashcards for Anki
front,back How many questions are on the CISM exam? | A) 100 / B) 125 / C) 150 / D) 175,"C) 150. 150 multiple-choice questions, one best answer." How long do you have? | A) 2 hours / B) 3 hours / C) 3.5 hours / D) 4 hours,D) 4 hours. Four hours. On what scale does ISACA report your score? | A) 0 to 100% / B) 100 to 500 / C) 200 to 800 / D) 0 to 1000,C) 200 to 800. A scaled score from 200 to 800. What score passes? | A) 400 / B) 450 / C) 500 / D) 700,B) 450. 450 or higher. "Do the pretest items count toward your score? | A) Yes, double / B) Yes, like any other / C) No, they are not used to calculate the score / D) Only if you pass","C) No, they are not used to calculate the score. ISACA exams include unscored pretest items, and they do not count." What are the domain-level results on your score report for? | A) They set the pass mark / B) Information only / C) They are averaged into your score / D) They decide your retake date,B) Information only. Domain-level results are provided for information only; the score comes from items answered correctly. Which CISM domain carries the most weight? | A) Information Security Governance / B) Information Security Risk Management / C) Information Security Program / D) Incident Management,C) Information Security Program. Information Security Program carries 33% under both the 2022 outline and the outline from 3 November 2026. Which CISM domain carries the least weight? | A) Information Security Governance / B) Information Security Risk Management / C) Information Security Program / D) Incident Management,"A) Information Security Governance. Governance: 17% up to 2 November 2026, and 18% from 3 November 2026." What two content areas does the CISM outline add from 3 November 2026? | A) Cloud security and DevSecOps / B) Enterprise architecture and information security architecture / C) Privacy engineering and data ethics / D) Third-party risk and supply chain,B) Enterprise architecture and information security architecture. ISACA's press release of 10 September 2026 names enterprise architecture and information security architecture. What weight does Information Security Risk Management carry? | A) 17% / B) 20% / C) 30% / D) 33%,"B) 20%. 20% of the exam, under both the 2022 outline and the outline from 3 November 2026."
Where next?
Also free: the CISM interview questions and the CISM mind map, plus every other credential on our study tools page. For the full syllabus, the CISM Exam Guide and the CISM Practice Questions go domain by domain.
Frequently asked questions
Is this CISM quiz like the real exam?
No. It is a 10-question recall check written by Credential Press, not exam questions. Each answer cites its source.
Can I study the CISM quiz offline?
Yes. Download the free flashcard CSV and import it into Anki or any flashcard app that reads CSV.
How many questions are on the CISM exam?
150. 150 multiple-choice questions, one best answer.
Which books go deeper on CISM?

Certified Information Security Manager. 12 chapters, 342 pages.

Practice questions with full rationales, sized to the published domain weights. 213 pages.
Sources
Credential Press is independent of ISACA.