CMMC Certified Professional

CCP is the entry credential for the CMMC assessor ecosystem and a prerequisite for the Certified CMMC Assessor and Instructor certifications.

170 questions210 minutesPass mark 450 on a scaled range of 200–800Closed bookContent in progress

What the CCP covers

Consultants, IT and cybersecurity staff, and contract compliance professionals who support defense contractors preparing for or undergoing a CMMC assessment.

ISACA publishes the blueprint below. The percentages are the share of the exam each area accounts for — not separate hurdles, since scoring is based on the total number of questions answered correctly.

CMMC Certified Professional content areas and their blueprint weights
Content area	Weight	Lessons
CMMC Ecosystem	5%	1
CMMC-AB Code of Professional Conduct (Ethics)	5%	1
CMMC Governance and Source Documents	15%	1
CMMC Model Construct and Implementation Evaluation	35%	3
CMMC Assessment Process (CAP)	25%	2
Scoping	15%	2

Try a question

Answer it, then read why. Every question on this site cites the document it came from.

1. A contractor engages a firm to help remediate gaps ahead of a CMMC Level 2 certification assessment. Which role does that firm hold, and what does it prevent?

A Registered Provider Organization, which may not then conduct the certification assessmentA C3PAO, which may conduct the assessment because it already knows the environmentThe CAICO, which certifies the contractor directly once remediation is completeA Licensed Partner Publisher, which may assess if its practitioners hold CCP

2. During an assessment a CCP recognises that the OSC is a direct competitor of their own employer. What does the Code require?

Report the OSC to the CAICO before proceedingDisclose the conflict and withdraw unless it can be demonstrably managedContinue, because the CCP is a team member rather than the Lead AssessorContinue but exclude themselves from scoring any single practice

All 20 practice questions

Format and logistics

Delivery: Proctored, computer-based (PSI)
Fees: USD 575 (ISACA member) · USD 760 (Non-member)
Retakes: Four attempts within a rolling 12-month period.

Full format, scoring and booking detail

Common questions

How many questions is the CCP exam, and how long do I get?

170 multiple-choice questions in 3.5 hours (210 minutes). Some of those are unscored pretest items; ISACA does not publish how many, so treat all 170 as counting.

Source: ISACA CCA/CCP Exam Candidate Guide, Appendix A

What is the passing score?

450, on a scaled range of 200 to 800. Scoring is based on the total number of items answered correctly regardless of domain — domain-level results are reported for information only and are not separate hurdles.

Source: ISACA CCA/CCP Exam Candidate Guide, Scoring Criteria and Appendix A

How many times can I retake it?

Four attempts within a rolling 12-month period.

Source: ISACA CCA/CCP Exam Candidate Guide, Retake Policy

Do I have to take a training course first?

Yes. Completing mandatory CCP training through an Approved Training Provider is a prerequisite for earning the certification.

Source: ISACA CCA/CCP Exam Candidate Guide, Exam Prerequisites

All 9 questions

Where this comes from

Every figure above is taken from the documents below and checked against them on each build. Where ISACA’s own sources disagree with each other, the controlled document wins and the disagreement is recorded.

CMMC Assessment Process (CAP) v2.0 — Version 2.0, 16 December 2024

ISACA’s web page says candidates have five years from passing to apply for certification; the controlled candidate guide says one. The PDF is treated as authoritative.

The superseded 2022 Cyber AB blueprint states a pass mark of 500. The current figure is 450 — do not build from the older document.

The candidate guide cites dodcio.defense.gov for CMMC documentation, which now returns 403. The files are served from dowcio.war.gov after the department rename.

CCP™ and CMMC® are marks of their respective owners. QualExam is an independent study resource and is not affiliated with, endorsed by, or sponsored by ISACA or the US Department of War.

By QualExam editorial. Written against the awarding body’s published blueprint and checked against it on every build.

Source: ISACA CCA/CCP Exam Candidate Guide

Last checked against the source: 2026-09-22