CISA Practice Test 2026 — Free CISA Exam Prep Questions
CISA is ISACA's credential for professionals who audit, control, monitor and assess information technology and business systems. Our audit-scenario practice follows the five domains of ISACA's current CISA job practice, from the audit process and IT governance through systems development, operations and resilience, and protection of information assets.
A network intrusion detection sensor monitors traffic to a public web server, where TLS is terminated. Web server logs show repeated known attack strings, yet the sensor has raised no alerts. Which of the following is the MOST likely cause?
CISA format, scoring & key facts
Computer-based at PSI test centers worldwide or remotely proctored online by PSI. Two breaks of up to 10 minutes are allowed with proctor permission; the exam timer keeps running. No calculators or reference materials are permitted.
| Questions | 150 multiple-choice questions, one best answer from four options |
|---|---|
| Time | 4 hours (240 minutes) |
| Passing score | 450 on a 200–800 scale |
| Content outline | CISA Exam Content Outline effective August 2024: 5 domains, 43 supporting tasks |
| Delivery | PSI test center or remote proctored, year-round |
| Calculator | Not permitted (and not needed) |
| Fee | US$575 members / US$760 non-members |
| Retakes | Up to 4 attempts in 12 months (waits of 30, 90 and 90 days) |
| Results | Preliminary on screen; official within 10 working days |
| Experience | 5 years within the last 10 to certify; you can test first |
Facts last verified Oct 17, 2026. Source: www.isaca.org/credentialing/cisa. Always confirm details with ISACA before your exam.
When can you take the CISA?
Registration is continuous. After you pay, you have a 6-month eligibility period to schedule and take the exam with PSI, and you can book from 48 hours after payment. Rescheduling is free up to 48 hours before your appointment.
Plan backwards from your exam date
What the CISA covers
Every PrepBanq CISA test mirrors the official domain weights.
Domain distribution
% of the exam| Content domain | Weight | ≈ Questions on exam | Our practice questions |
|---|---|---|---|
Information System Auditing ProcessAudit planning (standards, audit types, risk-based planning, control types) and execution (project management, testing and sampling, evidence, data analytics, reporting, quality assurance). | 18% | ~27 | 27 questions → |
Governance and Management of ITIT governance, strategy, policies, enterprise architecture, enterprise risk management, privacy, data governance and classification, plus resource, vendor and performance management. | 18% | ~27 | 27 questions → |
Information Systems Acquisition, Development, and ImplementationProject governance, business cases, development methodologies and control design, then testing, release, migration and data conversion, and post-implementation review. | 12% | ~18 | 18 questions → |
Information Systems Operations and Business ResilienceIT operations (assets, job scheduling, interfaces, shadow IT, capacity, incidents, change and patch management, logs, service levels, databases) and resilience (BIA, backup and restoration, BCP, DRP). | 26% | ~39 | 39 questions → |
Protection of Information AssetsSecurity frameworks, physical controls, identity and access, network and endpoint security, DLP, encryption, PKI, cloud and mobile/IoT, plus awareness, attacks, security testing, monitoring, incident response and forensics. | 26% | ~39 | 39 questions → |
How to register for the CISA
Eligibility
Anyone can take the exam. To become certified you need at least 5 years of IS/IT audit, control, assurance or security experience gained within the 10 years before applying (waivers of up to 3 years are available), and you must apply within 5 years of passing. Passers without the experience can hold the CISA Associate designation.
Retake policy
Up to 4 attempts in a rolling 12-month period: wait 30 days before the second attempt, then 90 days before each of the third and fourth. The full exam fee is paid for each attempt.
Score release
A preliminary pass/fail result appears on screen when you finish; the official score is emailed and posted online within 10 working days.
Credential renewal
Maintain CISA by earning 20 CPE hours a year and 120 hours every 3 years, and paying the annual maintenance fee (US$45 members, US$85 non-members).
Your path to passing the CISA
Diagnostic
Free test across every content areaTargeted practice
Drill your weakest areas firstReview
Every option explainedFull simulation
Real format and timingReady
Book your exam with confidenceCISA practice tests
All CISA tests →The full CISA question bank is on its way
All CISA practice tests here are free right now. Leave your email and we'll tell you when the complete question bank, full-length simulations and readiness tracking launch.
CISA FAQ
How many questions are on the CISA?
The CISA has 150 questions and you have 4 hours to finish. Question types: Multiple choice with one best answer: each question has a stem and four options. Some questions present a scenario followed by two or more questions about it. Qualifiers such as BEST or MOST likely are common..
How long is the CISA exam?
Testing time for the CISA is 4 hours. Two breaks of up to 10 minutes each; the timer does not stop
What is the passing score for the CISA?
CISA passing standard: 450 on a scaled score of 200–800. Score range: 200–800.
How much does the CISA cost?
The CISA registration fee is US$575 for ISACA members, US$760 for non-members (nonrefundable). After passing, a US$50 application processing fee applies. Check the official site for current fees before you register.
What is on the CISA?
The CISA covers Information System Auditing Process (about 18%), Governance and Management of IT (about 18%), Information Systems Acquisition, Development, and Implementation (about 12%), Information Systems Operations and Business Resilience (about 26%), Protection of Information Assets (about 26%).
Who administers the CISA?
The Certified Information Systems Auditor (CISA) Exam is administered by ISACA. Delivery: Computer-based at PSI test centers worldwide or remotely proctored online by PSI. Two breaks of up to 10 minutes are allowed with proctor permission; the exam timer keeps running. No calculators or reference materials are permitted..
Can you retake the CISA?
Up to 4 attempts in a rolling 12-month period: wait 30 days before the second attempt, then 90 days before each of the third and fourth. The full exam fee is paid for each attempt.
Is there a free CISA practice test?
Yes. PrepBanq has 15 free CISA practice tests with 150 exam-style questions in the real CISA formats, and every answer is explained. No credit card is needed.
CISA practice test reviews
No reviews yet. Took a free CISA practice test? Tell other test-takers how it went.
Related business & hr exams
Your CISA prep starts with one free test.
Instant score report · no credit card.