On October 1, 2025, the Computerized Adaptive Testing (CAT) exam format took effect for three ISC2 certifications: Certified in Cybersecurity (CC), Certified Cloud Security Professional (CCSP), and Systems Security Certified Practitioner (SSCP). Let's look at what Computerized Adaptive Testing is.

What is Computer Adaptive Testing (CAT)?

October 23, 2025
in Certification, General

What is Computer Adaptive Testing (CAT)? https://certify.cybervista.net/wp-content/uploads/2025/10/Blog_CAT.png 1200 628 N2K Certify N2K Certify https://certify.cybervista.net/wp-content/uploads/2025/10/Blog_CAT.png October 23, 2025 October 23, 2025

By Chris Hare, N2K Project Management Specialist and Content Developer

On October 1, 2025, the Computerized Adaptive Testing (CAT) exam format took effect for three ISC2 certifications: Certified in Cybersecurity (CC), Certified Cloud Security Professional (CCSP), and Systems Security Certified Practitioner (SSCP). Though beneficial in many ways, preparing for a CAT is different from a traditional linear exam. We’ll help you understand what the change means for you and how we can help you prepare for your test day experience.

What is Computerized Adaptive Testing (CAT)?

CAT stands for “computerized adaptive testing.” Unlike linear exams, the CAT format dynamically adjusts to your performance in real time, reducing test fatigue while delivering a more precise measurement of your true ability.

How does Computerized Adaptive Testing (CAT) work?

Every time you answer a question, the computer evaluates your performance and adjusts the difficulty of the next question based on how you’ve done so far. As you get answers right, the questions become more challenging and the system refines its estimate of your ability. If you miss a question, the computer will present an easier one next. With each response, the assessment becomes more precise in determining your true skill level.

Because each question affects the next, you can’t go back and change a previous answer. And if the system determines that it’s no longer possible to achieve a passing score, the exam will end early before all the questions are completed.

Why is the exam format changing?

So why is ISC2 making such a significant change to their exam? In their latest press release, ISC2 shared that the exam transition was spawned by a need to build a “safe cyber world” to ensure their exam administration meets the “highest integrity and standards in evaluation of a candidate’s knowledge, skills, and abilities.” The transition also helps to “meet the critical demand for cybersecurity professionals to experience a fair, valid, reliable, and efficient exam process.”

Some benefits for the candidates include:

- - More accurate and efficient evaluation of a candidate’s competency
  - Additional opportunities for examination administration
  - Improved and enhanced exam security

Will the CAT exam be more difficult?

Let’s go back to how a CAT works to answer this question. The computer analyzes your answers and uses that data to decide what question to feed you next, all in real-time. The computer decides if you pass or fail by using a rating called a competence level, which is basically your score range.

The competence level gets more and more specific as the test goes along. The more difficult questions you answer correctly, the higher your competence level grows. So, it’s a good thing if you find yourself answering difficult questions.

Will my chances of passing the exam change?

Yes and no. Overall, the passing rate of the exam is unlikely to change. However, it is difficult to say if the same individuals who would pass in the current, traditional exam format will have the same result in the CAT format. The psychology of taking the exam may impact some more than others. The bottom line – be prepared and know your stuff.

Will I be able to review or “flag” questions?

Unfortunately not. In a CAT exam, you can move in one direction: forward. Test-takers will be unable to skip, flag, or revisit questions.

How many questions will I receive on the CAT exam?

Each test taker will be presented with a minimum of 100 items on all exams. The maximum item count is 150 items for the CCSP and CISSP exams and 125 for the CC and SSCP.

Please note that there are also 25 unscored or pretest questions that aren’t counted in these totals and part of the minimum length of the exam. (You won’t be able to distinguish between the scored and unscored questions, so don’t try.)

How are Computerized Adaptive Testing (CAT) exams scored?

What score do I need to pass the CAT exam?

Candidates who correctly answer 100 items across all domains will pass the exam. Those who are unable to answer 100 items correctly will not achieve a passing score. Additionally, those who exceed 100 items may have shown proficiency in some areas and not in others, so the system may present additional questions to offer the ability to achieve a minimal passing score.

Candidates must answer a minimum of 75 operational (or scored) items, along with 25 pretest (or unscored) items to receive a pass for fail result.

Will I still be able to see my score if I fail the exam? If I fail, what kind of reporting will I receive on my test performance?

Candidates who do not pass and who have answered the minimum number of required items will be provided diagnostic feedback on domains where they have struggled.

Candidates do not receive numeric scaled scores. Proficiency levels for each domain are provided only to those candidates who did not pass.

Do all of the questions count equally towards my CAT exam score?

Technically, no. However, your competence level (your score range) is shaped significantly by early questions. If you don’t do well in the early questions, then your competence level will go below the passing level, and it will be hard to recover your competence level to above the passing threshold.

That’s why it’s important to get comfortable early in the exam.

How does the CAT exam determine whether I pass or fail?

The CAT exam is scored in one of three different ways:

- - Confidence Interval Rule – Once the minimum exam length, which is considered 100 items, is reached, the exam will stop once the system is 95% statistically certain the candidate has passed or failed. This rule simply means that the exam is determined based on statistical data that you have either passed or failed the exam.
  - Maximum Length – If the exam is able to reach its maximum length before the system has 95% certainty of the candidate’s result, the final score is compared to its passing standard (a score at or above the standard is considered a pass, where as a score below the standard would be considered a fail).
  - Run Out of Time (R.O.O.T.) – This rule states that if the candidate’s test reaches its maximum time limit and the system is not able to grant it a pass or fail with a high confidence, the final score is compared to the passing standard. Basically, if your final score exceeds or meets the standard, a candidate will pass. If it falls below the standard, a candidate will fail. If a candidate fails to answer the minimum of 100 questions within the required time limit, the candidate will automatically fail the exam.

What to expect during a Computerized Adaptive Testing (CAT) exam

Will I be able to take breaks during the CAT exam?

Test-takers will be able to take breaks during the CAT exam; however, the exam clock will continue to count down. In other words, breaks are included in the maximum administration time.

When will I receive my CAT exam results?

Right away! If you don’t pass, then you will receive diagnostic feedback showing the domains in which you struggled.

Are there time limits for each question?

No. But keep in mind that you want the exam to be able to evaluate your competence level. So, at a minimum, you need to get through at least 100 questions in the time allotted.

Is the CAT exam one continuous session, or is it broken into different sections?

No. The CAT exam will feel like one continuous exam and is not broken down into mini CATs. This is significant because there is no guarantee that all content on the CISSP exam is covered. So, like with most tests, you might not see content from certain sub-domains.