Question 1

How many CCA practice questions are there?

Accepted Answer

150 questions across 1 version, each with the correct answer and an explanation.

Question 2

Are there free CCA sample questions?

Accepted Answer

Yes. 12 sample questions are free; 6 are open to everyone and the rest unlock with a free account.

Question 3

What does full access include?

Accepted Answer

Every CCA question in study, timed and flashcard modes, explanations for each answer, and progress that saves so you can resume.

Question 4

What topics does CCA cover?

Accepted Answer

Evaluating Organizations Seeking Certification (OSC) Against CMMC Level 2 (15%), CMMC Level 2 Assessment Scoping (20%), CMMC Assessment Process (CAP) (25%), Assessing CMMC Level 2 Practices (40%).

Question 5

What is the ISACA CMMC Certified Assessor (CCA) certification?

Accepted Answer

The CCA is ISACA's assessor-level credential in the Cybersecurity Maturity Model Certification (CMMC) program of the US Department of War (DoW). A CCA is qualified to conduct formal CMMC Level 2 assessments of defense contractors, serve on a Certified Third-Party Assessment Organization (C3PAO) team, and make final determinations on compliance. ISACA administers the credential as the authorized CMMC Assessor and Instructor Certification Organization (CAICO).

Question 6

What are the prerequisites to take the ISACA CCA exam?

Accepted Answer

You must hold an active CMMC Certified Professional (CCP) certification, complete the mandatory CAICO-approved CCA training through an Approved Training Provider (ATP), and hold a baseline certification satisfying DoD 8140.03 Work Role 612 (Security Control Assessor) at Intermediate or Advanced proficiency (ISACA's CISA and CISM are eligible options). You do not need a Tier 3 determination before taking the exam.

Question 7

How long is the CCA exam and how many questions does it have?

Accepted Answer

The ISACA CCA exam is 4 hours (240 minutes) and contains 150 multiple-choice questions. It is scored on a scaled range of 200-800, with 450 required to pass, and it is not an open-book exam.

Question 8

How much does the ISACA CCA exam cost?

Accepted Answer

The CCA exam registration is US$575 for ISACA members and US$760 for non-members. Certification also requires a US$50 application processing fee. Exams are delivered at PSI test centers globally or via online remote proctoring.

Question 9

What is the difference between a CCP and a CCA?

Accepted Answer

A CMMC Certified Professional (CCP) is the foundational credential and can participate on a CMMC Level 2 assessment team but only to verify Level 1 practices; a CCP cannot make final determinations. A CMMC Certified Assessor (CCA) is the next-level credential that can conduct CMMC Level 2 assessments and make final compliance determinations. Passing the CCP exam is a prerequisite to the CCA.

Question 10

What does the CCA exam cover?

Accepted Answer

The CCA exam covers four domains: Evaluating Organizations Seeking Certification (OSC) Against CMMC Level 2 (15%), CMMC Level 2 Assessment Scoping (20%), the CMMC Assessment Process/CAP (25%), and Assessing CMMC Level 2 Practices (40%). CMMC Level 2 requires implementation of the full NIST SP 800-171 controls to protect Controlled Unclassified Information (CUI).

Question 11

Is the ISACA CCA a valid, current certification?

Accepted Answer

Yes. ISACA was authorized as the exclusive CAICO for the DoW CMMC program in December 2025 and administers the CCA credential. Formal CMMC implementation began 10 November 2025 with phased rollout to full implementation by November 2028, so the CCA is a current, active credential. It is ANAB-accredited under ISO/IEC 17024:2012.

Question 12

What is the passing score for CCA?

Accepted Answer

You need 450 (scaled 200-800) to pass CCA.

Question 13

How long is the CCA certification valid?

Accepted Answer

3-year certification cycle. Recertification: Minimum 20 CPE per year and 120 CPE over the three-year cycle; at least 90 CPE related to the certification, two of which must relate to CMMC rules.

CCACMMC Certified Assessor practice test

Full access

Practice CCA in the simulator.

CCA, by the numbers.

Everything about CCA.

Exam information

What CCA covers

How do I earn this certification?

How to study for this exam?

What's changed on this exam?

Who should take this exam?

Three ways to practise

Study mode

Timed mode

Flashcards

CCA questions, answered

CCACMMC Certified Assessor practice test

Full access

Practice CCA in the simulator.

CCA, by the numbers.

Everything about CCA.

Exam information

01Exam format240 min · 1504

02RegistrationPSI test centers, online proctoring2

03Validity3-year certification cycle2

04In our question bankv1 (150)

What CCA covers

01Evaluating Organizations Seeking Certification (OSC) Against CMMC Level 215%1 topic

1.1Understanding the Organization Seeking Certification (OSC)Evaluate an OSC's environment and readiness against CMMC Level 2 requirements3 obj.

Hands-on skills & common mistakesReviewing an OSC's System Security Plan (SSP) · Confusing FCI (Level 1) with CUI (Level 2) protection obligations

02CMMC Level 2 Assessment Scoping20%1 topic

03CMMC Assessment Process (CAP)25%1 topic

04Assessing CMMC Level 2 Practices40%1 topic