How many questions are on CASP+?

Up to 90 questions in 165 minutes including advanced PBQs testing enterprise security architecture.

What is the CASP+ passing score?

Pass/fail only — no numeric score reported.

Is CASP+ harder than CISSP?

More technically hands-on with complex PBQs. CISSP is broader and more management-focused.

Does CASP+ have PBQs?

Yes, 5-7 complex enterprise PBQs that can take 10-15 minutes each.

What experience is needed?

10+ years IT with 5+ in hands-on security recommended.

10-14 weeks at 2-3 hours daily for experienced security professionals.

Is CASP+ DoD approved?

Yes, IAT Level III — the highest technical level via CompTIA.

How Many Questions Are on the CompTIA CASP+ Exam? Complete 2026 Guide

The CompTIA CASP+ exam contains up to 90 questions with a 165-minute time limit and pass/fail scoring. CASP+ is CompTIA's most advanced cybersecurity certification, designed for practitioners with 10+ years of IT experience including at least 5 years in hands-on security. It is the only CompTIA certification that does not report a numeric passing score.

Unlike Security+ and CySA+ which test knowledge and analysis, CASP+ tests your ability to architect and engineer security solutions for complex enterprise environments. CASP+ is approved for DoD 8570/8140 IAT Level III — the highest technical level available through CompTIA.

Max Questions

165 min

Time Limit

P/F

Pass/Fail Only

$494

Exam Cost

CASP+ Domain Breakdown

Domain	% of Exam	~Questions	Key Topics
Security Architecture	29%	~26	Enterprise security design, cloud, zero trust, microservices
Security Operations	30%	~27	Threat management, vulnerability management, IR, forensics
Security Engineering and Cryptography	26%	~23	Crypto implementations, PKI at scale, hardware security
Governance, Risk, and Compliance	15%	~14	Risk strategies, compliance frameworks, BIA

Key Insight: Security Operations (30%) and Security Architecture (29%) represent 59% of the exam.

What Makes CASP+ PBQs Different

Multi-step enterprise scenarios: Design security for multi-cloud environments with compliance requirements
Trade-off analysis: Choose solutions considering cost, performance, and risk
Advanced cryptographic decisions: Select cipher suites and configurations for specific use cases
Incident response leadership: Make executive-level decisions during complex incidents

CASP+ PBQs take 10-15 minutes each. Expect 5-7 PBQs.

CASP+ vs. CISSP

Factor	CASP+	CISSP
Focus	Technical architecture	Security management + breadth
Questions	Up to 90 (PBQs)	125-175 (CAT adaptive)
Scoring	Pass/Fail	700/1000
Cost	$494	$749
DoD Level	IAT III	IAT III
Best For	Hands-on architects	Security managers/leaders

CompTIA Security Pathway

Level	Cert	Questions	Focus
Entry	Security+	90 / 90 min	Security fundamentals
Intermediate	CySA+	85 / 165 min	Blue team analysis
Intermediate	PenTest+	85 / 165 min	Red team testing
Advanced	CASP+	90 / 165 min	Security architecture

Study Preparation

Experienced professionals need 10-14 weeks at 2-3 hours daily:

Enterprise architecture: Design security for complex multi-cloud environments
Cryptography depth: Cipher suite selection, key management at scale, PKI design
Scenario-based thinking: Evaluate options against business requirements
Lab work: Set up SIEM, SOAR, and EDR tools in lab environments

Frequently Asked Questions

How many questions?

Up to 90 in 165 minutes with advanced enterprise PBQs.

Passing score?

Pass/fail only — no numeric score.

Harder than CISSP?

More technically hands-on. CISSP is broader but more management-focused.

PBQs?

Yes, 5-7 complex PBQs taking 10-15 minutes each.

Experience needed?

10+ years IT with 5+ in security recommended.

Study time?

10-14 weeks at 2-3 hours daily.

DoD approved?

Yes, IAT Level III — highest via CompTIA.

CASP+ vs CySA+?

CySA+ = intermediate analysis. CASP+ = advanced architecture.

Practice CASP+ Questions

Challenge yourself with advanced security architecture practice questions.

Start Free Practice Test →