thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ISC2 · Cybersecurity · Entry

ISC2 Certified in Cybersecurity (CC) exam guide

Exam CC

ISC2 Certified in Cybersecurity (CC) is an entry-level credential proving you understand security principles, governance, access control, network and cloud security, and security operations. A new exam outline took effect 1 September 2026, and CC remains a low-cost first step into cybersecurity that is approved under DoDM 8140.03.

Questions100-125
Time limit120 minutes
Passing score700 (0-1000 scale)
Exam fee$199 USD
Valid for3 years
DeliveryPearson VUE test center

Format: Computerized adaptive testing (CAT): multiple choice and advanced item types. Fee note: Plus $50 first annual maintenance fee; ISC2's one-million-free-CC enrollment closed May 2026.

Who it's for

Students, career changers and IT staff with no security experience who want a recognised first cybersecurity credential.

What the exam covers

Security Principles—
Security Governance—
Identity and Access Management (IAM) Concepts—
Networking and Cloud Security Concepts—
Security Operations and Incident Response—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: None; no work experience required.

Recommended: None required; ISC2's free or paid CC self-paced training is the usual preparation.

Keeping it active

Three-year cycle: 45 CPE credits and a $50 annual maintenance fee.

Skills & careers

Skills it validates

  • Explaining the CIA triad, risk and security controls
  • Security governance: policies, standards and ethics
  • Access control and identity concepts
  • Network and cloud security fundamentals
  • Incident response, business continuity and disaster recovery
  • Security operations basics such as logging, hardening and awareness

Job roles

SOC Analyst (Tier 1)IT Support SpecialistJunior Security AnalystSecurity Operations TechnicianNetwork Support TechnicianCompliance Assistant

DoD 8140

Approved by the U.S. DoD under DoDM 8140.03; check the DoD Cyber Workforce Qualification matrix for the work roles and proficiency levels it satisfies. Open the DoD Workforce Navigator

Where it fits in your path

Take before

No prerequisite certification needed.

You are here

ISC2 Certified in Cybersecurity (CC)

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Download the September 2026 CC exam outline and complete Domains 1-2 (principles and governance) of the ISC2 CC training.
  2. Week 2: Cover IAM concepts and networking/cloud security; learn ports, protocols and common attacks.
  3. Week 3: Study security operations and incident response, BC/DR.
  4. Week 4: Take timed practice exams and review missed topics against the outline, then book.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • The exam is adaptive: questions get harder as you answer well, so a difficult exam is normal and not a sign of failing.
  • You cannot skip or return to questions in CAT; answer each before moving on.
  • Think like a manager: choose the answer that follows policy and reduces risk, not the most technical fix.
  • Study the new governance and cloud content added in the 2026 outline; older prep material may miss it.
  • Pace for up to 125 items in 120 minutes, just under a minute each.

Key terms for this exam

All 166 terms Study with thinQcards™

Commonly confused on this exam

Frequently asked questions

How much does ISC2 CC cost?

$199 for the exam, plus a $50 annual maintenance fee once certified.

Is ISC2 CC still free?

The One Million Certified in Cybersecurity enrollment closed in May 2026; unexpired codes can be used until 31 December 2026.

Is CC worth it?

It is a solid, cheap first credential; most employers still expect Security+ for analyst roles, so treat CC as a stepping stone.

What changed in 2026?

A new outline effective 1 September 2026 with five domains, including a separate Security Governance domain and networking-and-cloud coverage.

CC vs Security+?

CC is entry level and conceptual; Security+ is deeper, includes performance-based questions and is more widely required by employers.

Official page: www.isc2.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.