The exam stopped at 100 questions: what does that mean?

When the screen cuts out at question 100, it means one thing only: the adaptive algorithm considers that it knows enough to reach a verdict. It has hit the lower bound of the format in force since 15 April 2024 — 100 to 150 questions in 3 hours, down from 125 to 175 questions in 4 hours — with sufficient certainty about your level. That certainty can be positive or negative. Nothing displayed on screen, no impression of difficulty and no mental tally tells you which.

These reference points come from candidate reports (our method).

What does it mean when the exam stops at 100 questions?

It means that the estimate of your level has moved out of the zone of uncertainty, in one direction or the other.

Distribution observed across the 48 exam reports contained in the 50 accounts we kept (August 2023 to July 2026) — the other two deal with how the CAT works and with a community simulator, and so report no outcome:

Reported outcome	Reports
Pass at exactly 100 questions	40
Pass between 101 and 149 questions	1
Pass at 150 questions	4
Pass at 175 questions (old format, 2023)	1
Fail (at 150 questions or by running out of time)	1
Number not specified	1

This table describes what people post, not what happens to candidates in general. What it mainly shows is that, since April 2024, stopping at 100 questions is the ordinary course of events — to the point that it carries no information in itself.

Some candidates who passed still read it as a sign: "apparently, the system cut me off because I was doing well". That is an interpretation formed after reading the result.

Can you fail at 100 questions?

Yes. One explicit case is documented:

"Failed at 100, proficient on 3 domains and below on the other 5"

Early stopping works symmetrically: if the algorithm concludes with sufficient certainty that your level is below the threshold, it has no reason to ask 50 more questions. The belief that "stopping at 100 = pass" is therefore false, even though it holds true in most published accounts — an effect of the overrepresentation of passes.

Also worth noting: you can be below the threshold in some domains and still pass. "on real exam you can 'fail' some domains and pass. [...] Every domain will be tested, just not sure what the 'minimum' is." That minimum is not public: check with ISC2.

I am at question 120 and it is still going: have I already failed?

No. Going past 100 questions means the algorithm has not yet reached a verdict, nothing more. The reports document four passes at exactly 150 questions, one pass "just over the 100 mark — maybe 105", and one pass secured on the very last question:

"Don't give up on the last question. I passed literally at the last question."

The report that comes closest to the experience behind that question:

"I almost gave up when I noticed I was at 140 and still answering questions [...] but I pushed through to the final 150 questions and still had about 50 minutes left"

The real danger after question 100

It is not carrying on, it is changing your behaviour. Two documented failures come from exactly that:

"My first attempt was about 2 months ago, and I failed mainly because I rushed after 100 questions. [...] [second attempt] focused more on understanding the questions instead of rushing through them"

Another candidate puts it this way: "Knowing CAT behavior is critical — without it, you risk rushing and guessing if you cross 100 questions".

That rushing comes down to time management and reading too fast, one of the eight self-diagnosed causes of failure listed in why candidates fail the CISSP.

Hence the value of having already sat an exam that does not stop at 100: Cybridia offers an adaptive mode modelled on the CAT and 8 timed practice exams, which lets you experience that situation before exam day rather than discovering it in the test room. Pacing yourself for 150 questions is covered in time management on the CISSP exam.

Why does almost everyone walk out convinced they failed?

Because it is a property of the format: an adaptive test constantly serves questions calibrated at the edge of your level, with no interim feedback and no partial score. The sense of failure is therefore almost universal in the reports, including among candidates who passed at 100 questions with 80 minutes to spare, and it says nothing about the result. That experience, the way candidates describe it and how people get through it are covered in detail in the feeling of failing during the CISSP exam.

Do easy questions mean I am failing?

There is nothing to read into it, for three reasons that compound.

Difficulty is calibrated statistically, not felt. A question rated as hard can look obvious to you if it falls in your day-to-day field — "Maybe you are an expert in incident response, so those questions are easier."

Some questions do not count. Beta questions, unscored, are inserted to trial future content; one candidate reckoned they accounted for about 10% of his exam. A question that feels out of place may simply be under calibration.

Candidates who thought they read a signal were wrong. Two examples, both from candidates who passed:

"At some point I got one or two questions that did make sense and was worried the algorithm was making it easier on me due to incorrect answers, but I honestly have no idea."

"kept getting SDLC questions over and over, thought i must be doing something wrong. then i passed the second i submitted question 100"

The question selection mechanism is detailed in the CAT format, 100 to 150 questions.

How and when do you find out the result?

On the way out of the test room, on paper. The screen cuts out with no transition, a satisfaction survey — also timed — is displayed, then the proctor hands over a document, often without comment: "The administrator peeked at the paper, handed me my results, but didn't say a word. I assumed that silence meant I had failed."

Stage	What you receive	Reported timing
Leaving the test room	"provisionally passed" sheet or per-domain failure report	immediate
ISC2 confirmation once the endorsement application is approved	confirmation email	3 to 8 weeks, most often 3 to 6

If you pass, no numerical score is given. If you fail, the report gives a per-domain standing along the lines of "3 Above, 2 Near, 3 Below". How scoring works is explained in CISSP score of 700/1000: why it is not 70%.

Is the pass rate you read online representative?

No, and that matters for reading the table at the top of this article correctly. Pass reports are massively overrepresented: people are more inclined to post a "Passed!" than a failure. One commenter says so bluntly:

"This sub is a bubble. It does not represent the reality of this exam. The reality is, only about 20% of exam takers pass on the first try."

That 20% figure cannot be verified: it should not be repeated as fact. The bias it points to, however, is real. The 40 passes at 100 questions out of 48 reports say nothing about your chances: they say who speaks up after the exam. The same caution applies to practice exam percentages, whose spread among candidates who passed is detailed in what score to aim for on CISSP practice exams; other blog articles rest on the same set of reports.