Handling the 3 hours of the CISSP exam: the pace to hold

The most useful time management rule on the CISSP exam fits in one sentence: budget for 150 questions, not for 100. Since 15 April 2024, the exam runs to 100 to 150 questions in a maximum of 3 hours — down from 125 to 175 questions in 4 hours. The vast majority of candidates stop at 100, but anyone who has paced themselves against that figure is in trouble from question 101, and failures are documented on both sides: too slow and the clock stops you; too fast after the hundredth question and you cut corners.

The benchmarks below come from candidate accounts (our method).

How long does the CISSP exam really last?

Three hours of testing. But the time spent at the centre is longer: check-in and identity verification come first — arriving early is the norm, 45 minutes is often quoted — and two timed sequences frame the exam, the non-disclosure agreement (NDA) to accept before starting and the satisfaction survey that follows. The NDA is not a formality: one candidate was logged out for trying to read it in full in the test room, then refused a retake and given no refund. Its stated duration, what to do about it and the details of check-in are covered in exam day at the Pearson VUE test centre.

What follows therefore covers only the 3 hours of testing proper.

How much time should you give each question?

The calculation depends entirely on the assumption you make about the number of questions.

Assumption	Average time per question
150 questions in 3 hours	72 seconds
100 questions in 3 hours	108 seconds

The times actually reported by candidates who passed at 100 questions vary widely:

Total time for 100 questions	Average pace
50 minutes (fastest case reported)	about 30 seconds per question
1 hour to 1 hour 30	about 40 to 55 seconds
2 hours to 2 hours 20	about 75 to 85 seconds
2 hours 58 (2 minutes left)	about 107 seconds

The practical rule of thumb: the vast majority of those who pass at 100 questions spend between 1 hour and 2 hours 30 on the exam, i.e. 1 to 1.5 minutes per question, with a handful of questions costing markedly more — "Around 10–15 questions were pretty challenging, took me 3–4 minutes each".

Those 3 to 4 minutes on fifteen or so questions add up to 45 to 60 minutes on their own: that is precisely the margin consumed by an exam that runs to the end.

Should you pace yourself for 100 or for 150 questions?

For 150. This is the most important practical point on this page, and it has a simple justification: during the exam, you do not know at which question it will stop.

The opposite reasoning has a documented precedent. On the very day of the format change, a badly informed candidate was pacing himself against the old format and reports that he "sped run through the questions". He passed, but the mirror case exists too: a candidate who "dragged through the entire 150 questions for 3hours" and failed.

One arithmetic benchmark follows from this: at question 75, having used more than half of the three hours rules out reaching 150 comfortably. That is a pacing calculation, not a prediction — nothing visible during the exam tells you anything about your estimated level, as explained in CISSP score of 700/1000: why it is not 70%.

Is the timeout a real risk?

Yes, even though most candidates finish with 30 to 90 minutes to spare. The documented edge cases:

Situation	Outcome
Stopped at 100 questions, 2 minutes left	pass
150 questions, 5 minutes left	fail
150 questions, full 3 hours	fail
Stopped by the clock at question 149	pass
Ran out of time (previous attempt)	fail

The clearest account comes from a candidate who experienced both: "Today I easily passed the CISSP at 100 questions with a ton of time left. Last month I ran out of time and failed."

One comment offers a reading consistent with adaptive scoring: "Running out of time is not detriment, unless you ability estimate is below 700." In other words, the clock does not destroy an ability estimate already established, but neither does it make up for anything.

What happens if you speed up after question 100?

This is the best-documented trap, and it costs attempts — time management and reading too fast are in fact among the eight causes of failure listed in why candidates fail the CISSP. Crossing the 100 mark is a shock — many candidates wrongly conclude they have failed — and the natural reaction is to rush through what follows.

"My first attempt was about 2 months ago, and I failed mainly because I rushed after 100 questions. [...] [second attempt] focused more on understanding the questions instead of rushing through them"

The practical rule is therefore to change nothing at question 101: neither speed up nor slow down. One candidate who held on to the end sums up the result: "I almost gave up when I noticed I was at 140 and still answering questions [...] but I pushed through to the final 150 questions and still had about 50 minutes left" — passed. What crossing the 100 mark implies is detailed in exam stopped at 100 questions: pass or fail?.

Practising on sessions that go beyond 100 questions saves you from discovering that situation on exam day: the Cybridia app offers an adaptive mode modelled on the CAT and 8 timed practice exams, which lets you measure your stamina over the real duration rather than on short sets.

Should you spend more time on the first questions?

Candidates are divided, and nothing settles the debate.

Three accounts out of fifty explicitly argue for front-loading your effort:

"If you were to get 2 questions wrong in a row it is that much harder to get back to where you started. That is why it is so important to try and get the first 10-20 mostly correct."

"Spend more time on the first 20 questions — they set the tone for CAT and can boost your passing chance"

A practical variant, from a candidate who passed: "Took my time with the first 30 questions to build momentum, then sped up once I felt confident."

The opposing camp disputes the very idea of steering the algorithm:

"So, Don't stress the CAT too much, it's going to do what it wants and you're just along for the ride."

These two attitudes coexist, with no factual refutation of the weight of the first questions. In practice, the only rule both camps can live with is do not rush at the start, which still fits a budget calculated on 150 questions provided you do not turn the first 20 into 40 minutes.

Can you take a break during the exam?

Yes according to several accounts, but the clock keeps running: it is therefore a time management trade-off, where a few minutes lost on the clock can be worth more than half an hour of degraded reading. The strategies observed — taking the break, refusing it, or pre-empting it by stopping drinking before the exam — are detailed in exam day at the Pearson VUE test centre.

How the format works in general is described in the CAT format, 100 to 150 questions, and all the themes are accessible from the blog index.