AAIA practice exam: ISACA's, and a full mock

An AAIA practice exam does two jobs: it shows you the format before exam day, and it shows you where your knowledge is thin while there is still time to fix it. ISACA offers a short free quiz and a paid question database; a full mock is something you have to find or build. This guide covers what ISACA publishes, what a faithful full mock looks like, and how to take and review one so it improves your score.

The short answer

ISACA's free practice quiz has 12 questions. ISACA's AAIA page invites you to "Test your knowledge with these 12 free questions." You submit a form to see your results.
ISACA's paid questions database has more than 200. ISACA's page describes "a comprehensive 200+ question database with the most sought-after questions for preparing for the exam".
A full mock is 90 questions on one 150-minute clock, four options and one best answer each, with the domains at 33%, 46% and 21%: about 30, 41 and 19 questions.
A practice score is not a scaled score. ISACA reports results from 200 to 800 and publishes no conversion from questions answered correctly, so no practice test can tell you your scaled score.
The review matters more than the score. A mock is worth what you learn from the rationales of the questions you missed.
Any test that offers questions from the exam itself is a red flag, and using one breaks ISACA's rules.

Is there an AAIA practice exam from ISACA?

Yes, a short one. ISACA's AAIA page lists a "Free AAIA Practice Exam" of 12 questions. The quiz page says its questions come from ISACA's own test prep and are "the same level of difficulty you can expect" on the exam, and to see your result it asks you to "fill-out and submit the form to view your results."

Use it for what it is: a feel for the level and the style, in ISACA's own words. Twelve questions cannot tell you how ready you are, and they cover only a small part of the outline's 17 topics. Try it early, before you have studied much, so you know what you are working toward. Its questions are ISACA's, so we neither reproduce nor paraphrase them.

ISACA members have one more free source: an online study group. ISACA's page describes it as a "member-exclusive online forum" that "acts as a global virtual study group for those preparing to take the AAIA certification exam", where you can "Answer practice questions and get help from experts for free."

AAIA question banks: ISACA's database and ours

A question bank is for daily practice, topic by topic, rather than for timing yourself on a full exam. Two are worth knowing.

ISACA's Questions, Answers & Explanation Database. ISACA's AAIA page describes "a comprehensive 200+ question database with the most sought-after questions for preparing for the exam", sold as six months of access that its store page lets you extend for a further fee. It is ISACA's own material in ISACA's own phrasing, and it is the bank ISACA itself sells for the AAIA. Its prices are in our guide to every AAIA fee.

Our AAIA question bank. 619 original questions written to ISACA's outline in the exam's format, each with a rationale that explains the right answer and why each wrong one falls short. You can practice by topic, by lesson or only the questions you missed, and the qualifier sits in capitals in every stem that has one, as ISACA writes it, so the habit of reading for it forms early. None of our questions is AAIA exam content: each is written for practice.

The two are not either-or. ISACA's database gives you ISACA's own phrasing; a larger bank gives you volume, since the outline's 17 topics and 23 tasks need more than a few questions each to learn well.

What a full AAIA mock exam should look like

A mock is only useful if it is the exam's shape. Check any practice exam, ours included, against what ISACA's candidate guide says about the exam.

Feature	The AAIA, per ISACA	A faithful mock
Length	"2.5 hours (150 minutes), 90 multiple choice questions"	90 questions on a 150-minute timer
Question shape	"Every question has a stem (question) and four options (answer choices)."	Four options, one best answer
Best answer	"All questions are designed with one best answer."	Options that are each partly right, separated by the qualifier
Domains	33%, 46% and 21%	About 30, 41 and 19 questions
Wrong answers	"There are no penalties for incorrect answers."	Every question answered
The break	One break of up to ten minutes, and "the timer will not stop"	The clock keeps running if you pause
Materials	Reference and study materials are prohibited	No notes, no searching

A practice test that is two hours long, gives the domains other shares, or has true-or-false and fill-in questions is practicing something other than the AAIA. ISACA's numbers are in its candidate guide, and they are the ones to trust; the AAIA exam format and scoring sets them out in full.

How to take an AAIA practice exam

The point of a full mock is to rehearse the exam's conditions, so take it the way you will take the exam.

One sitting, one clock. Set aside 150 minutes without interruptions. Do not pause the timer for a break: on exam day, "Your exam will be paused, but the timer will not stop during your approved break."
No notes, no searching. The guide's list of prohibited items includes "Reference materials, study materials, paper, notes, notepads, language dictionaries, or other aids". Looking something up turns a mock into a quiz.
Pace by checkpoints. At 100 seconds a question, about 50 minutes should be gone at question 30 and 100 minutes at question 60. If you are behind, speed up on the questions you know.
Answer everything. "All questions should be answered. There are no penalties for incorrect answers." If you are unsure, rule out what you can and choose; the guide's advice is to "eliminate known incorrect answers and then make the best choice possible."
Read for the qualifier. "An exam question may require you to choose the appropriate answer based on a qualifier, such as MOST likely or BEST." Find the qualifier before you read the options.

Take your first full mock once you have studied every domain at least once, not at the very start; a mock taken too early mostly measures what you have not read yet. Take the last one about a week before the exam, so there is time to act on what it shows.

How to review a practice exam

The score takes a second to read; the review is where the improvement is. For each question you got wrong, and each you got right by guessing:

Read the rationale for every option, not only the right one. The exam's wrong options are rarely absurd, and knowing why each falls short is how you learn to separate options that sound alike.
Name the reason you missed it. Did you not know the concept, misread the qualifier, or choose a good action that was not the best one? Each has a different fix: more study, slower reading, or more practice judging options.
Log it by topic. After a mock, the topics where your misses cluster are your study plan for the next week. ISACA's own score report works by domain too, though "Domain level results are provided for informational purposes only."
Go back to the lesson, then try the missed questions again a few days later, when you no longer remember the answer.

Our mock is built for this review. Its results list each topic with the costliest gap first, show every question with its rationale, and link each question to the lesson that teaches it. Here is the kind of question worth reviewing slowly, because the option that is usually right is wrong here:

How the exam asks it

An IS auditor must test whether a lender's credit decisions followed its policy. The decisions are made and stored on a vendor's platform, and the vendor will not export the decision log, only individual case files on request. Which of the following is the MOST appropriate approach?

A. Test every decision with a query against the log, since logged decisions make full-population testing the norm.
B. Request a sample of case files, test them, and document why the full population could not be tested.
C. Rely on the platform's built-in rule engine, since the vendor configured it to enforce the lender's policy.
D. Postpone the test until the lender keeps its own copy of every decision the platform makes.

Answer: B. Full-population testing is usually the stronger choice when every decision is logged and extractable, but here the log sits with the vendor, and a population the auditor cannot reach is one of the constraints that make sampling the right response. The auditor samples what can be obtained and records which constraint drove the choice, so the conclusion's limits are clear. A query (A) assumes access the auditor does not have; the rule engine (C) is the control under test, not evidence that it works; and postponing (D) leaves the policy untested when a sample can test it now. Written for this guide in the exam's shape; it is not an ISACA question.

What score should you aim for on an AAIA practice test?

There is no honest single number. ISACA reports the exam on "a common scale from 200 to 800", and "You must receive a score of 450 or higher to pass the exam which represents the minimum standard of knowledge." It publishes no conversion from the number of questions answered correctly to that scale, so any practice test that reports your result as a scaled score, or says what percentage equals 450, is guessing.

Our mock is plain about this: it shows the percentage of its own questions you answered correctly, and says that this is not a scaled score. What a practice score can tell you is a trend. Read it three ways:

Across mocks. A score that climbs from one mock to the next, on different questions, means your preparation is working.
Across domains. The exam's score is "based on the total number of exam items answered correctly, regardless of domain", so one weak domain pulls the whole total down. With AI Operations at 46%, a weak result there costs more than anywhere else.
Against the clock. If you finish with time to spare and your accuracy holds in the last 30 questions, the pacing is under control.

How to spot a bad AAIA practice test

ISACA's article on exam integrity is direct about one kind of bad practice material: "websites that offer access to supposed "live" test questions are either deceptive or violating copyright laws, and this would be considered a breach of the test-taker agreement." It names other red flags too, "guarantees to pass and individuals who encourage sharing questions from the latest exam."

Beyond the rules, five signs that a practice test will waste your time:

The format is wrong. Two hours instead of 150 minutes, a question count other than 90, or domain shares other than 33%, 46% and 21%.
There are no rationales, or the rationale only repeats the answer. Without the reason, a wrong answer teaches nothing.
Every option but one is absurd. The AAIA's questions offer several things an auditor might do; easy distractors train you for an exam you will not take.
It promises a pass, or names a percentage it says is the same as 450.
It claims to hold questions from the exam itself. If that is true, using it breaks ISACA's rules; if it is false, you are memorizing someone's guesses.

Where to start

Our AAIA practice is built to the shape above: 619 questions by topic with full rationales, and a mock of 90 questions on one 150-minute clock that draws each domain at its share. A free account opens AI models and requirements in full, 60 of the questions among them, so you can try the method before paying; full access is a single payment with nothing to renew. For more sample questions with their reasoning, see AAIA exam questions; for the AAISM's version of this guide, AAISM practice exam.

By QualExam editorial. Written against the certifying body’s published documents, pinned by hash so a revised edition shows up as a change.