Free CISA Practice Test 2026
200 original questions on ISACA's five CISA domains: the audit process, IT governance, acquisition and development, operations and resilience, and protecting information assets. Four 50-question tests weighted like the real exam. Tuned for mobile. No account needed.
Train on mobile
Test on desktop
The CISA exam at a glance
The CISA (Certified Information Systems Auditor) exam is ISACA's certification exam for IT audit, control and assurance professionals. ISACA's content outline gives 150 questions across five job practice domains, in effect since 1 August 2024: Information System Auditing Process 18%, Governance and Management of IT 18%, Information Systems Acquisition, Development and Implementation 12%, Information Systems Operations and Business Resilience 26%, and Protection of Information Assets 26%. Guides quoting ISACA's candidate guide give 4 hours and a scaled score of 200 to 800, with 450 needed to pass. It is taken on a computer at a PSI test center or with a remote proctor.
Tigertest has 200 CISA practice questions with explanations, all free with no account required.
- Questions
- 150 multiple choice
- Time
- 4 hours (guides quoting ISACA)
- Passing score
- 450 on a 200 to 800 scale
- Largest domains
- Operations and resilience, protection of assets, 26% each
- Outline in effect
- Since 1 August 2024
- Certification
- Also needs 5 years of IS audit, control or security work
- Run by
- ISACA, delivered by PSI
Updated by the Tigertest team. Practice questions follow ISACA CISA exam content outline and certification requirements, checked November 2026. Exam rules change, so confirm current details with ISACA: CISA Exam Content Outline.
How It Works
Train by Topic
Five training sets, one per CISA domain: the auditing process; governance and management of IT; acquisition, development and implementation; operations and business resilience; and protection of information assets. Questions you miss come back until you have mastered them.
Practice Tests at the Real Pace
Four tests of 50 questions in the real exam's domain weights. The real exam is 150 questions in 4 hours, so give each test about 80 minutes. No question appears in more than one test, and every answer is explained. Aim for 70% or better.
Built on the CISA Job Practice Areas
ISACA splits the exam across five domains, in effect since 1 August 2024. Each practice test here keeps the same balance: 9 auditing process, 9 governance, 6 acquisition and development, 13 operations and resilience, and 13 protection questions in every 50.
Help Make Tigertest Better
Have an idea, a topic you'd like covered, or a question that could be clearer? We read every message and use it to improve every test.
Share FeedbackHow to Pass the CISA Exam
1. Answer as the auditor
Most questions ask what the IS auditor should do first, or what is best or most important. The auditor reviews, tests and reports; management designs controls, fixes findings and accepts risk. An option where the auditor builds a control or makes the business decision is usually wrong.
2. Think in risk
Audit plans, sampling and recommendations all start from risk. When several answers look sensible, choose the one that deals with the greatest risk to the business, or the one that gives the most reliable evidence, such as data the auditor gets directly rather than a report the auditee hands over.
3. Give Domains 4 and 5 the most time
Operations and business resilience and protection of information assets are more than half the exam together. Know change and patch management, backups, business impact analysis and recovery objectives, access reviews, network and physical controls, encryption and incident response well.
4. Practice at the real pace
The real exam gives you about a minute and a half per question for 4 hours. Take each 50-question test here in about 80 minutes, review every explanation, and retake the domains you miss until you score 70% or better on every test.
CISA Frequently Asked Questions
What is the CISA exam?
The Certified Information Systems Auditor exam is ISACA's certification exam for IT auditors, control and assurance professionals. It tests how an auditor plans and runs IS audits, judges IT governance, reviews system development, operations and resilience, and evaluates the protection of information assets. You take it on a computer at a PSI test center or online with a remote proctor.
How many questions are on the CISA exam and what score do I need?
ISACA's exam content outline gives 150 questions. Guides quoting ISACA's candidate guide add that the exam is multiple choice, lasts 4 hours, and is scored on a scale of 200 to 800 with 450 needed to pass. ISACA does not publish a percent equivalent, so the 70% line on each 50-question practice test here is Tigertest's readiness target, not ISACA's pass mark.
What do the five CISA domains cover and how are they weighted?
Since 1 August 2024 the exam covers Information System Auditing Process 18%, Governance and Management of IT 18%, Information Systems Acquisition, Development and Implementation 12%, Information Systems Operations and Business Resilience 26%, and Protection of Information Assets 26%. Each practice test here keeps that balance: 9, 9, 6, 13 and 13 questions out of 50.
Do I need work experience to take the CISA exam?
You can sit the exam first. To be certified, ISACA asks for five or more years of IS audit, control or security work experience within the ten years before you apply, and you have five years from passing to apply. Certified holders then agree to ISACA's Code of Professional Ethics and auditing standards and earn at least 120 CPE hours every three years, with at least 20 each year.
Are these real ISACA CISA questions?
No. Every question is original, written by Tigertest to the published job practice areas in the best, first and most style the exam uses, where you answer as the auditor rather than as the IT manager. It is free practice, not affiliated with or endorsed by ISACA, and it does not replace ISACA's own review materials.
Related practice tests
Every test on Tigertest is free and needs no account to start.
Ready to Pass the CISA Exam?
Free to start. No account required. 200 questions across all five CISA domains.
Start practicing