Certified in Risk and Information Systems Control practice questions
Covers IT risk governance, risk identification and analysis, risk response, control design and monitoring, and the technology and security principles a risk practitioner must understand.
20 free credits when you sign in, no card needed.
Domains and official weights
792 questions in this bankSimulations are drawn to these official weights, so your score reflects the real exam's balance.
Sources for the exam format
- www.isaca.orgAppendix B CRISC Examination Content Outline (Effective 2025): domains, weights, numbered subtopics 1A1–4B3, 24 supporting tasks; 150 MCQ in 240 minutes; four options, one best answer, scenario sets; two 10-minute breaks; 200–800 scaled score, 450 to pass; pretest items
- www.isaca.org150 questions, domain weights, subtopics and supporting tasks (web version of the ECO)
- www.isaca.orgupdated exam available 3 November 2025; Risk Assessment 20%→22%, Technology and Security 22%→20%; domains unchanged
- www.isaca.orgdelivery at PSI test centres or remote proctoring, continuous registration
The real exam
- Official pass mark
- Scaled score of 450 or higher on ISACA's 200–800 scale
- Outline
- CRISC Examination Content Outline (Effective 2025), in force for exams from 3 November 2025 (ISACA Exam Candidate Guide v1.26)
- Navigation
- Flag questions and review them before you submit, as on the real exam.
The real exam mixes unscored pretest items in among the 150 (ISACA does not publish how many) and allows two proctor-approved breaks of up to 10 minutes each with the clock still running; this simulation scores all 150 items, uses a 70% pass line in place of the unpublished scaled cut, and has no breaks.
Cost in credits
Questions you already paid for stay yours: reviewing them again is free.
Full exam simulationCRISC is a trademark of ISACA. CertDepth is not affiliated with or endorsed by ISACA. These are original practice questions, not real exam items.