Free ISACA CISM Practice Test (CISM)
CISM is a management certification, not a technical one. These questions are written from a security manager's seat across all four ISACA domains, where the answer turns on who decides, who owns the risk and what comes first rather than on how a control is configured.
10 questions, answers and explanations included. No account needed.
What you get, free
Every part of ISACA CISM prep on CertClue, with no paywall and no trial. An account unlocks the full bank; nothing here is held back for a paid tier.
1,627 practice questions
Objective-tagged, with a worked explanation on every one.
Performance-based questions
Hands-on task simulations - drag-and-drop, ordering, categorising - not just multiple choice.
Timed exam simulator
A full mock under real conditions: 150 questions, 240 minutes.
Readiness score
Per domain, tied to your exam date, so you know when you are ready to sit.
About the ISACA CISM exam
These facts come from the objectives published for CISM, and our question bank is weighted to match them.
- Exam code
- CISM
- Questions
- Up to 150
- Time limit
- 240 min
- Passing score
- 450 / 800
Domains and weightings
ISACA CISM questions people ask
Up to 150 questions in 240 minutes. The exact number varies between test forms, which is why the objectives say "up to" rather than giving a fixed count.
A scaled score of 450 on ISACA's 200 to 800 scale. That is a scaled score, not a percentage and not a count of correct answers, and ISACA does not publish how raw answers convert to it. Anyone telling you it equals a specific percentage is guessing.
150 questions in 240 minutes. All of them are multiple choice with a single best answer; CISM does not use the choose-two format that the CompTIA and AWS exams do.
You can sit the exam at any time. The five years of information security management experience is required to become certified, not to take the exam, and you have five years from passing to submit it. Up to two years can be waived by certain other certifications and degrees.
They are different rather than ranked. CISM is narrower and almost entirely management: governance, risk, programme and incident management, answered from a manager's seat. CISSP spans eight domains and goes deeper technically. People coming from a hands-on background usually find CISM's judgement framing the harder adjustment.
No, and be wary of any site that claims otherwise. Every question here is written from scratch against the published exam objectives. Sitting an exam having memorised leaked live questions breaks the non-disclosure agreement you accept at the test centre and can get your certification revoked.
Yes. Without an account you get 20 questions a day, and the count resets every day. A free account removes the daily cap and unlocks the full ISACA CISM question bank, flashcards, study notes, performance-based questions, a timed exam simulator and a readiness score. There is no paid tier and no card required.
Want the full ISACA CISM question bank?
A free account unlocks all 1,627 practice questions for this exam, plus flashcards, study notes, the timed exam simulator and a readiness score that tracks your weakest domains. There is no paid tier - all of it is free.
- No credit card
- No trial timer
- Every certification track
Other free practice tests
Every exam CertClue covers, each with its own bank and its own explanations.
CompTIASecurity+
CompTIAA+ (Core 1)
CompTIAA+ (Core 2)
CompTIANetwork+
ISC2Certified in Cybersecurity
AWSCertified Solutions Architect - Associate
MicrosoftAzure Fundamentals
AWSCertified Cloud Practitioner
CiscoCCNA
MicrosoftAzure Administrator
ISC2CISSP
AWSCertified Solutions Architect - Professional
MicrosoftAzure Solutions Architect Expert
CompTIACySA+
CompTIAPenTest+
PMIPMP
MicrosoftCloud and AI Security Engineer
CNCFCertified Kubernetes Administrator
All prep, no paywall.
Mapped to the published CISM domains.
Not affiliated with ISACA.
Completion, not the industry certification.