QCISSP Question Bank

About the question bank and its sources

This site gathers public English security question banks into one place you can actually practise in: 4,558 questions covering CISSP / CISA / Security+ SY0-701 / Security+ SY0-601. The point is to spend less time hunting for files, installing apps and importing question sets, and more time answering questions and reading the explanations.

Sources and licences

  • The core CISSP set comes from MIT-licensed open-source projects (Wammiri/cissp-practice-app, kickflip-labs/cissp-study-hub, sana2k/cissp-mock-test). Those questions are original work and can be used freely.
  • Another portion comes from public repositories that carry no licence statement (Piyush1786/CISSP_EXAM, 037g/cissp_test_sim, plus CISA and Security+ projects). They are included as published, for self-assessment only.
  • Recalled-exam “dump” banks were deliberately excluded: they breach exam confidentiality agreements and their answer keys are unreliable.
  • Copyright in the question text and explanations stays with each source and author; any rights holder can ask for their content to be removed.

Quality checks and known limits

  • Only questions with an explicit answer key are included — 108 items without one were dropped at import time.
  • Explanation coverage: CISSP 88%, CISA 77%, Security+ 100%. Missing explanations are labelled, never invented.
  • Questions from several sources were merged; terminology and spelling keep their original wording (the IAM domain, for instance, is written differently across sources) and were not mass-edited.
  • Some items come from older exam outlines (for example Security+ SY0-601). The version is labelled per bank, and SY0-701 is the one to prioritise.

What the site does

Sequential practice

Work through a bank in order, one question at a time, with instant verdicts and explanations — the right way to start.

Random practice

Shuffle the order so you cannot memorise answer positions.

Mock exam

Sample by the real question count and domain weights, run a countdown, then get a score, per-domain accuracy and a pass verdict.

Wrong-answer book

Missed questions are collected automatically, sorted by how often you missed them, and drilled until they stick.

Bookmarks

Flag anything worth a second look and review the whole set before exam day.

Study statistics

Attempts, accuracy, coverage, per-domain mastery bars and the history of every mock exam.

Disclaimer and privacy

This site is not affiliated with, and is not endorsed by, ISC2, ISACA or CompTIA. All questions are for personal self-assessment; always defer to the official study material and exam outlines. There are no accounts and no personal data is collected — answers, the wrong-answer book and exam scores stay in your own browser, and the server stores no study data at all.