Loading certification materials...

Back to Practice Exams

Domain 1 Practice Exam

Domain 1

Security and Risk Management

Focus on security governance, risk management, compliance, and professional ethics.

Domain 1 Overview

Security and Risk Management forms the foundation of the CISSP framework. This domain covers governance, compliance, risk management, and the professional ethics that guide security professionals.

Exam Weight:15% of total CISSP exam

Focus Areas:Governance, Risk, Compliance

Exam Details

Questions

Minutes

70%

Passing Score

Key Topics Covered

This exam covers all major topics within Domain 1

Understand, adhere to, and promote professional ethics

Understand and apply security concepts

Evaluate and apply security governance principles

Determine compliance and other requirements

Understand legal and regulatory issues

Understand requirements for investigation types

Develop, document, and implement security policy

Identify, analyze, and prioritize Business Continuity requirements

Contribute to and enforce personnel security policies

Understand and apply risk management concepts

Understand and apply threat modeling concepts

Apply Supply Chain Risk Management concepts

Establish and maintain a security awareness, education, and training program

Exam Instructions

This exam focuses exclusively on Domain 1: Security and Risk Management
You have 60 minutes to complete 50 questions (1.2 minutes per question)
Questions cover governance principles, risk management, and compliance frameworks
Think from a management and governance perspective
Consider organizational policies, procedures, and strategic decisions
Focus on the "why" and "what" rather than the "how" of implementation
Your results will help identify strengths and weaknesses in this domain

Ready to Start?

Test your knowledge of security governance and risk management

60 minutes

50 questions

Mixed difficulty

Domain 1 focus

Start Domain 1 Exam

Domain 1 Tips

Governance Focus: Think about organizational policies and strategic decisions.

Risk Management: Consider quantitative and qualitative risk analysis methods.

Compliance: Know major frameworks like ISO 27001, COBIT, and regulatory requirements.

Ethics: Apply the ISC² Code of Ethics in decision-making scenarios.

Study Resources

Domain 1 Practice Questions Domain 1 Flashcards