Resources
Free exam-domain breakdowns, FAQs, and where to actually register.
CISM Certification Prep
Exam domains
Information Security Governance17%
Information Risk Management33%
Information Security Program Development and Management33%
Information Security Incident Management17%
CISSP Certification Prep
Exam domains
Security and Risk Management16%
Security Architecture and Engineering13%
Communication and Network Security13%
Identity and Access Management13%
Security Assessment and Testing12%
Software Development Security10%
CompTIA Security+
Exam domains
General Security Concepts12%
Threats, Vulnerabilities, and Mitigations22%
Security Program Management and Oversight20%
CompTIA Network+
Exam domains
Network Implementation20%
Network Troubleshooting24%
Microsoft AB-900: Copilot and Agent Administration Fundamentals
Exam domains
Core Microsoft 365 Services and Security33%
Data Protection and Governance for Microsoft 365 and Copilot37%
Administering Copilot and Agents30%
CompTIA Tech+
Exam domains
IT Concepts and Terminology13%
Applications and Software18%
Software Development Concepts13%
Data and Database Fundamentals13%
CompTIA CySA+
Exam domains
Vulnerability Management26%
Incident Response and Management24%
Reporting and Communication16%
Microsoft MD-102: Endpoint Administrator
Exam domains
Prepare Infrastructure for Devices22%
Manage and Maintain Devices28%
Manage and Secure Applications18%
Optimize Endpoint Operations15%
CompTIA PenTest+
Exam domains
Reconnaissance and Enumeration21%
Vulnerability Discovery and Analysis17%
Post-exploitation and Lateral Movement14%
CompTIA A+ Core 1
Exam domains
Virtualization and Cloud Computing11%
Hardware and Network Troubleshooting28%
CompTIA A+ Core 2
Exam domains
Software Troubleshooting23%
Operational Procedures21%
ISC2 CCSP
Exam domains
Cloud Concepts, Architecture and Design17%
Cloud Platform and Infrastructure Security17%
Cloud Application Security16%
Cloud Security Operations17%
Legal, Risk and Compliance13%
Microsoft AZ-104: Azure Administrator
Exam domains
Manage Azure Identities and Governance23%
Implement and Manage Storage18%
Deploy and Manage Azure Compute Resources24%
Implement and Manage Virtual Networking20%
Monitor and Maintain Azure Resources15%
Microsoft MS-700: Managing Microsoft Teams
Exam domains
Configure and Manage a Teams Environment43%
Manage Teams, Channels, Chats, and Apps22%
Manage Meetings and Calling18%
Monitor, Report On, and Troubleshoot Teams17%
Microsoft MS-721: Collaboration Communications Systems Engineer
Exam domains
Plan and Design Collaboration Communications Systems24%
Configure and Manage Teams Meetings, Webinars, and Town Halls18%
Configure and Manage Teams Phone35%
Configure and Manage Teams Rooms and Devices23%
CompTIA SecAI+
Exam domains
Basic AI Concepts Related to Cybersecurity17%
AI Governance, Risk, and Compliance19%
ISACA AAISM: Advanced in AI Security Management
Exam domains
AI Governance and Program Management31%
AI Technologies and Controls38%
CompTIA Server+
Exam domains
Server Hardware Installation and Management18%
Security and Disaster Recovery24%
CompTIA Linux+
Exam domains
Services and User Management20%
Automation, Orchestration, and Scripting17%
CompTIA Data+
Exam domains
Data Concepts and Environments20%
Data Acquisition and Preparation22%
Visualization and Reporting20%
CompTIA DataSys+
Exam domains
Database Management and Maintenance25%
Data and Database Security23%
CompTIA DataAI
Exam domains
Mathematics and Statistics17%
Modeling, Analysis, and Outcomes24%
Operations and Processes22%
Specialized Applications of Data Science13%
CompTIA SecurityX
Exam domains
Governance, Risk, and Compliance20%
CompTIA CloudNetX
Exam domains
Network Architecture Design31%
Network Operations, Monitoring, and Performance16%
Network Troubleshooting25%
ISC2 CGRC
Exam domains
Security and Privacy Governance, Risk Management, and Compliance Program16%
Selection and Approval of Framework, Security, and Privacy Controls14%
Implementation of Security and Privacy Controls17%
Assessment/Audit of Security and Privacy Controls16%
Compliance Maintenance13%
ISC2 CSSLP
Exam domains
Secure Software Concepts12%
Secure Software Lifecycle Management11%
Secure Software Requirements13%
Secure Software Architecture and Design15%
Secure Software Implementation14%
Secure Software Testing14%
Secure Software Deployment, Operations, Maintenance11%
Secure Software Supply Chain10%
ISC2 SSCP
Exam domains
Security Concepts and Practices16%
Risk Identification, Monitoring and Analysis15%
Incident Response and Recovery14%
Network and Communications Security16%
Systems and Application Security15%
ISC2 CISSP-ISSAP
Exam domains
Governance, Risk, and Compliance (GRC)21%
Security Architecture Modeling22%
Infrastructure and System Security Architecture32%
Identity and Access Management (IAM) Architecture25%
ISC2 CISSP-ISSEP
Exam domains
Systems Security Engineering Foundations24%
Security Planning and Engineering22%
Systems Security Implementation, Verification and Validation20%
Secure Operations, Change Management and Disposal14%
ISC2 CISSP-ISSMP
Exam domains
Leadership and Organizational Management21%
Systems Lifecycle Management15%
Contingency Management12%
Law, Ethics, and Security Compliance Management14%
Microsoft AZ-900: Azure Fundamentals
Exam domains
Describe cloud concepts28%
Describe Azure architecture and services40%
Describe Azure management and governance32%
Microsoft AZ-700: Azure Network Engineer Associate
Exam domains
Design and implement core networking infrastructure28%
Design, implement, and manage connectivity services23%
Design and implement application delivery services18%
Design and implement private access to Azure services13%
Design and implement Azure network security services18%
Microsoft SC-401: Information Security Administrator
Exam domains
Implement information protection34%
Implement data loss prevention and retention33%
Manage risks, alerts, and activities33%
Microsoft SC-300: Identity and Access Administrator
Exam domains
Implement and manage user identities25%
Implement authentication and access management25%
Plan and implement workload identities25%
Plan and automate identity governance25%
ISACA CISA
Exam domains
Information System Auditing Process18%
Governance and Management of IT18%
Information Systems Acquisition, Development and Implementation12%
Information Systems Operations and Business Resilience26%
Protection of Information Assets26%
ISACA CRISC
Exam domains
Risk Response and Reporting32%
Technology and Security20%
ISACA CDPSE
Exam domains
Privacy Risk Management and Compliance18%
Data Life Cycle Management23%
ISACA CGEIT
Exam domains
Governance of Enterprise IT40%
ISACA CCOA
Exam domains
Cybersecurity Principles and Risk20%
Adversarial Tactics, Techniques, and Procedures10%
Incident Detection and Response34%
CompTIA Project+
Exam domains
Project Management Concepts33%
Project Life Cycle Phases30%
Tools and Documentation19%
Basics of IT and Governance18%
Microsoft SC-500: Cloud and AI Security Engineer
Exam domains
Manage Identity, Access, and Governance23%
Secure Storage, Databases, and Networking27%
Manage and Monitor Security Posture25%
Microsoft SC-200: Security Operations Analyst
Exam domains
Manage a Security Operations Environment42%
Respond to Security Incidents38%
Perform Threat Hunting20%
Microsoft AI-901: Azure AI Fundamentals
Exam domains
Identify AI Concepts and Capabilities42%
Implement AI Solutions by Using Microsoft Foundry58%
Microsoft DP-900: Azure Data Fundamentals
Exam domains
Describe Core Data Concepts28%
Identify Considerations for Relational Data on Azure25%
Describe Considerations for Non-Relational Data on Azure20%
Describe an Analytics Workload on Azure27%
Microsoft PL-300: Power BI Data Analyst
Exam domains
Visualize and Analyze the Data28%
Manage and Secure Power BI18%
IAPP CIPP/E: Certified Information Privacy Professional/Europe
Exam domains
Introduction to European Data Protection13%
European Data Protection Law and Regulation31%
European Data Processing23%
European Data Protection: Scope and Accountability17%
Compliance with European Data Protection Law and Regulation16%
IAPP CIPT: Certified Information Privacy Technologist
Exam domains
The Privacy Technologist's Role in the Context of the Organization23%
Data Collection, Use, Dissemination and Destruction28%
Privacy Risk Management25%
Privacy Engineering and Privacy Governance13%
IAPP CIPM: Certified Information Privacy Manager
Exam domains
Privacy Program: Developing a Framework21%
Privacy Program: Establishing Program Governance18%
Privacy Program Operational Life Cycle: Assessing Data19%
Privacy Program Operational Life Cycle: Protecting Personal Data15%
Privacy Program Operational Life Cycle: Sustaining Program Performance11%
Privacy Program Operational Life Cycle: Responding to Requests and Incidents16%
IAPP CIPP/US: Certified Information Privacy Professional/United States
Exam domains
Introduction to the U.S. Privacy Environment40%
Limits on Private-sector Collection and Use of Data23%
Government and Court Access to Private-sector Information5%
EC-Council CEH: Certified Ethical Hacker
Exam domains
Information Security and Ethical Hacking Overview5%
Reconnaissance Techniques17%
System Hacking Phases and Attack Techniques15%
Network and Perimeter Hacking24%
Web Application Hacking14%
Wireless Network Hacking5%
Mobile Platform, IoT, and OT Hacking10%
EC-Council ECIH: Certified Incident Handler
Exam domains
Incident Response and Handling Process11%
Email Security Incidents12%
Network Level Incidents12%
Application Level Incidents11%
Cloud Security Incidents10%
Endpoint Security Incidents11%
EC-Council CND: Certified Network Defender
Exam domains
Network Defense Management10%
Network Perimeter Protection16%
Application and Data Protection13%
Enterprise Virtual, Cloud, and Wireless Network Protection12%
EC-Council CHFI: Computer Hacking Forensic Investigator
Exam domains
Regulations, Policies and Ethics15%
Procedures and Methodology17%
Tools/Systems/Programs16%
EC-Council C|CISO: Certified Chief Information Security Officer
Exam domains
Governance, Risk, Compliance, and Audit Management15%
Organizational Executive Leadership16%
Information Security Controls, Security Program Management & Operations12%
Information Security Core Competencies46%
Strategic Planning, Finance, Procurement, and Third-Party Management11%
EC-Council CPENT: Certified Penetration Testing Professional
Exam domains
Penetration Testing Methodologies, Scoping and Engagement5%
Network Penetration Testing45%
Web Application Penetration Testing16%
Wireless and IoT Penetration Testing4%
Industrial Controls and Cloud Penetration Testing7%
Binary Analysis and Exploitation11%
Reporting and Post Testing Actions5%
AWS Solutions Architect Associate: SAA-C03
Exam domains
Design Secure Architectures30%
Design Resilient Architectures26%
Design High-Performing Architectures24%
Design Cost-Optimized Architectures20%
AWS Cloud Practitioner: CLF-C02
Exam domains
Security and Compliance30%
Cloud Technology and Services34%
Billing, Pricing, and Support12%
AWS Security Specialty: SCS-C03
Exam domains
Infrastructure Security18%
Identity and Access Management20%
Security Foundations and Governance14%
AWS DevOps Engineer Professional: DOP-C02
Exam domains
Configuration Management and IaC17%
Resilient Cloud Solutions15%
Monitoring and Logging15%
Incident and Event Response14%
Security and Compliance17%
AWS Solutions Architect Professional: SAP-C02
Exam domains
Design Solutions for Organizational Complexity26%
Design for New Solutions29%
Continuous Improvement for Existing Solutions25%
Accelerate Workload Migration and Modernization20%
Cisco CCNA: Certified Network Associate
Exam domains
Automation and Programmability10%
CCNP Enterprise: ENARSI (300-410)
Exam domains
Infrastructure Security20%
Infrastructure Services25%
CCNP Security: SNCF (300-710)
Exam domains
Management and Troubleshooting25%
PMI CAPM: Certified Associate in Project Management
Exam domains
Project Management Fundamentals and Core Concepts36%
Predictive, Plan-Based Methodologies17%
Agile Frameworks/Methodologies20%
Business Analysis Frameworks27%
PMP: Project Management Professional
Frequently asked questions
Register for the real exam