Assessment scope
The assessment covers Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, Software Development Security. It reports only within this stated scope and does not infer unmeasured abilities.
Adaptive selection and coverage
The shared engine chooses the next eligible item from the track question bank while balancing coverage, current evidence, and the need to verify an uncertain boundary. A fixed seed makes the same technical scenario reproducible in automated tests.
Personalization questions describe goals, time, or preferences. They shape the explanation and plan but do not enter the knowledge score.
Quick and Full
- Quick uses up to 12 questions and provides a directional reading.
- Full uses up to 40 questions and gathers broader evidence.
- Both modes use the same track contract and scoring model.
- The report states the mode so a shorter result is not presented as more certain than its evidence.
How the result is formed
The engine summarizes the overall outcome, dimension outcomes, strongest dimension, primary gap, and any boundary or low-confidence condition. Internal estimates and numerical confidence remain hidden from the visible report and share payload.
Storage, sharing, and limits
- Not an official ISC2 score or pass guarantee.
- Does not measure professional experience or certification eligibility.
- Does not reproduce CAT scoring or advanced item types.
Official sources
Links should be rechecked before a high-stakes decision.
Choose your assessment depth
Use Quick for a directional reading or Full when you want broader evidence and a richer report.