thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ISC2 · Cybersecurity · Associate

ISC2 SSCP exam guide

Exam SSCP

The SSCP validates hands-on operational security skills: implementing, monitoring and administering IT infrastructure using security policies and controls. It is an intermediate ISC2 credential and a common step between entry-level certifications and the CISSP.

Questions100-125
Time limit120 minutes
Passing score700 out of 1000
Exam fee$249 USD
Valid for3 years
DeliveryPearson VUE test center

Format: Computerized adaptive testing (CAT): multiple choice and advanced item types. Fee note: Standard Americas price; varies by test location.

Who it's for

Security and systems administrators, network analysts and SOC staff with at least one year of hands-on security experience.

What the exam covers

Security Concepts and Practices16%
Access Controls15%
Risk Identification, Monitoring and Analysis15%
Incident Response and Recovery14%
Cryptography9%
Network and Communications Security16%
Systems and Application Security15%

Eligibility & prerequisites

Required: At least 1 year of cumulative paid work experience in one or more of the 7 SSCP domains. A bachelor's or master's degree in a cybersecurity program can satisfy the requirement. Candidates without experience can become an Associate of ISC2 and have 2 years to earn it. Endorsement is required.

Recommended: Hands-on security administration in an operational IT environment.

Keeping it active

3-year cycle: earn 60 CPE credits and pay the ISC2 annual maintenance fee.

Skills & careers

Skills it validates

  • Applying security policies and controls
  • Implementing access control models
  • Risk monitoring and log analysis
  • Incident response and recovery
  • Applying cryptography and PKI
  • Securing networks and endpoints

Job roles

Security AdministratorSystems AdministratorNetwork Security EngineerSecurity AnalystDatabase AdministratorSecurity Consultant

DoD 8140

Recognized in the DoD 8140 qualification matrix for technical cybersecurity work roles (formerly 8570 IAT I/II). Open the DoD Workforce Navigator

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Review the October 2025 outline; Security concepts and practices plus access controls.
  2. Week 2: Risk identification, monitoring and analysis; incident response and recovery.
  3. Week 3: Cryptography and network and communications security.
  4. Week 4: Systems and application security; two CAT-style practice tests.
  5. Week 5: Weak-domain review and scheduling.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • The exam is adaptive since October 1, 2025; you cannot return to previous questions.
  • Cryptography is only 9% but questions are precise; know algorithm types and uses.
  • Network and Communications Security and Security Concepts are the largest domains at 16% each.
  • Expect operational, practitioner-level scenarios rather than management questions.
  • Plan about one minute per item to fit 125 questions in 2 hours.

Key terms for this exam

All 235 terms Study with thinQcards™

Commonly confused on this exam

Frequently asked questions

How much does SSCP cost?

$249 USD at the standard Americas price.

SSCP vs Security+?

Both are intermediate. Security+ is more widely requested by employers; SSCP adds ISC2 membership and leads naturally to CISSP.

How long is the SSCP exam?

2 hours for 100-125 adaptive questions.

How do I maintain SSCP?

Earn 60 CPE credits every 3 years and pay the annual maintenance fee.

Can SSCP help with CISSP experience?

ISC2 accepts certain credentials to waive 1 year of CISSP experience; check ISC2's current list of approved credentials.

Official page: www.isc2.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.