VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ
CCA Verified 2026 Edition

CCA Practice Test

CCA, ISACA's CMMC Certified Assessor credential, certifies assessors who evaluate Defense Industrial Base contractors against CMMC Level 2. The practice test is built around evaluating organizations seeking certification, assessment scoping, the CMMC Assessment Process, and assessing Level 2 practices. It requires an active CMMC Certified Professional credential and satisfies DoD 8140.03's Work Role 612.

150 Total Questions
1 Included Version Get all versions for the price of one
English Edition
Launch Simulator Sample Questions
All-In-One Bundle
$79.99
$75.99
  • Interactive Simulator & AI
  • Detailed Explanations
  • Study, Timed & Flashcard Mode
  • Lifetime Access & Updates

Instant lifetime access • Secure checkout

Why Study with PlanetCert?

The Latest Questions

Practice questions and exam topics aligned with the current exam objectives.

Detailed Explanations

Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.

AI

AI-Powered Insights

Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.

Exam Information

Official specifications published by ISACA

Exam Format

240 min
150
450 (scaled 200-800)
Professional (Assessor)

Registration

PSI test centers or online proctoring

Validity

3-year certification cycle
Minimum 20 CPE per year and 120 CPE over the three-year cycle; at least 90 CPE related to the certification, two of which must relate to CMMC rules

CCA Exam Topics and Domains

CCA is organized into 4 weighted domains.

1

Evaluating Organizations Seeking Certification (OSC) Against CMMC Level 2

15%

Understanding the Organization Seeking Certification (OSC)

OSC roles, responsibilities, and readinessCMMC Level 2 applicability and objectives

Evaluate an OSC's environment and readiness against CMMC Level 2 requirements

2

CMMC Level 2 Assessment Scoping

20%

Defining and validating assessment scope

Asset categories and scoping guidanceScope boundaries and enclaves

Correctly scope a CMMC Level 2 assessment before evaluation begins

3

CMMC Assessment Process (CAP)

25%

Executing the CMMC Assessment Process

Assessment phases and workflowRoles and third-party assessment structure

Conduct a CMMC Level 2 assessment following the CMMC Assessment Process (CAP)

4

Assessing CMMC Level 2 Practices

40%

Evaluating NIST SP 800-171 practice implementation

Assessment objectives and methodsEvidence sufficiency and adequacyPractice families and control coverage

Assess an OSC's implementation of CMMC Level 2 (NIST SP 800-171) practices and reach defensible findings

How do I earn this certification?

Passing CCA earns the CMMC Certified Assessor (CCA) certification. It sits in the CMMC / DoW Defense Industrial Base cybersecurity assessment track.

Next Level Options
LCCA - Lead CMMC Certified Assessor (Lead CCA) CCAs may choose to pursue the Lead CCA designation as a next step.
Alternative Paths
  • CCI - CMMC Certified Instructor Deliver official CMMC training that prepares candidates for the CCP and CCA exams (Coming Soon).
  • CCP - CMMC Certified ProfessionalFoundational credential required before CCA; supports assessment-team participation.

Practice with Precision

The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.

Launch Simulator

How to study for this exam?

The most effective way to prepare for CCA is by using the PlanetCert Simulator to practice questions and review detailed explanations.

CCA Certification (official exam page)CCP/CCA Exam Candidate Guide (2026)ISACA CMMC / CAICO program page

What's changed on this exam?

Current Status
ACTIVE
Updates
CMMC Level 2 assessment (NIST SP 800-171) Formal CMMC implementation began 10 November 2025; CMMC Level 2 requires implementation of the full NIST SP 800-171 controls to protect CUI, which is the core subject the CCA assesses (Domain 4, 40% weight). • Release date: 2025-11-10

Who should take this exam?

Hold an active CMMC Certified Professional (CCP) certification
Complete the mandatory CAICO-approved CCA training via an Approved Training Provider (ATP)
Baseline certification satisfying DoD 8140.03 Work Role 612 (Security Control Assessor) at Intermediate or Advanced proficiency (e.g., ISACA CISA or CISM among eligible options)
All ISACA practice tests

Your Complete Exam Solution

Best-In-Class Practice Tests

Exam-style questions that match the format and difficulty of the real exam, updated regularly. Original material — not recycled dumps.

Topical Breakdown

Study by domain, pinpoint weak areas, and focus your time where it matters most. Every topic mapped to the official syllabus.

Flashcard Mode

Rapid-fire review to reinforce key concepts. Flip through questions and answers at your own pace before exam day.

See How You Compare Against Yourself

✕
✕
✕

Other Exam Prep

  • Outdated question dumpsRecycled, often inaccurate material
  • No explanationsMemorize answers without understanding
  • Static PDF filesNo interactive practice or feedback
  • Subscription feesRecurring charges, access expires
✓
✓
✓

PlanetCert

  • Verified, current questionsUpdated weekly to match live exam objectives
  • Expert-written rationalesUnderstand every concept, not just the answer
  • Session tracking & exam progressTrack every attempt, see your growth over time
  • Lifetime access, one pricePay once — updates included forever
CERTIFIEDCCA

Study Naturally, Study Responsibly

Practice with exam-style questions and detailed explanations until you're ready.

Try Free Demo
Secure Checkout Lifetime Access

Common Questions

What is the ISACA CMMC Certified Assessor (CCA) certification?
The CCA is ISACA's assessor-level credential in the Cybersecurity Maturity Model Certification (CMMC) program of the US Department of War (DoW). A CCA is qualified to conduct formal CMMC Level 2 assessments of defense contractors, serve on a Certified Third-Party Assessment Organization (C3PAO) team, and make final determinations on compliance. ISACA administers the credential as the authorized CMMC Assessor and Instructor Certification Organization (CAICO).
What are the prerequisites to take the ISACA CCA exam?
You must hold an active CMMC Certified Professional (CCP) certification, complete the mandatory CAICO-approved CCA training through an Approved Training Provider (ATP), and hold a baseline certification satisfying DoD 8140.03 Work Role 612 (Security Control Assessor) at Intermediate or Advanced proficiency (ISACA's CISA and CISM are eligible options). You do not need a Tier 3 determination before taking the exam.
How long is the CCA exam and how many questions does it have?
The ISACA CCA exam is 4 hours (240 minutes) and contains 150 multiple-choice questions. It is scored on a scaled range of 200-800, with 450 required to pass, and it is not an open-book exam.
How much does the ISACA CCA exam cost?
The CCA exam registration is US$575 for ISACA members and US$760 for non-members. Certification also requires a US$50 application processing fee. Exams are delivered at PSI test centers globally or via online remote proctoring.
What is the difference between a CCP and a CCA?
A CMMC Certified Professional (CCP) is the foundational credential and can participate on a CMMC Level 2 assessment team but only to verify Level 1 practices; a CCP cannot make final determinations. A CMMC Certified Assessor (CCA) is the next-level credential that can conduct CMMC Level 2 assessments and make final compliance determinations. Passing the CCP exam is a prerequisite to the CCA.
What does the CCA exam cover?
The CCA exam covers four domains: Evaluating Organizations Seeking Certification (OSC) Against CMMC Level 2 (15%), CMMC Level 2 Assessment Scoping (20%), the CMMC Assessment Process/CAP (25%), and Assessing CMMC Level 2 Practices (40%). CMMC Level 2 requires implementation of the full NIST SP 800-171 controls to protect Controlled Unclassified Information (CUI).
Is the ISACA CCA a valid, current certification?
Yes. ISACA was authorized as the exclusive CAICO for the DoW CMMC program in December 2025 and administers the CCA credential. Formal CMMC implementation began 10 November 2025 with phased rollout to full implementation by November 2028, so the CCA is a current, active credential. It is ANAB-accredited under ISO/IEC 17024:2012.

Student Reviews

I had a very good experience with PlanetCert. The study material was well structured, easy to understand, and closely aligned with the exam topics. The practice questions were especially helpful in improving my understanding and building confidence before the exam. The overall process was smooth, and the quality of the content was good. I would definitely recommend PlanetCert to professionals looking for well-organized certification preparation material.
Jimmi T. Oct 2026 · via Trustpilot (opens in a new tab)
Perfect, very fast and useful
David F. Aug 2026 · via Trustpilot (opens in a new tab)
Really happy with this platform so far. Instead of just giving you the answers to memorize like most old school brain dumps, they actually explain the reasoning behind the correct choices. The exam simulations and flashcards have been super helpful for my study routine.
Sharanjit S. Jun 2026 · via Trustpilot (opens in a new tab)
User friendly, accessible! I love it.
Jenn K. Oct 2026 · via Trustpilot (opens in a new tab)
Most of the correct answers were answer 1 or A. It should be mixed up or at least have the option to randomize the order the answers appear. It did help me pass the exam without being a dump of the exam questions.
Scott S. Sep 2026 · via Trustpilot (opens in a new tab)
Really useful simulator, it's not as good as the official resources but still allows for multiple retakes, flash cards were useful, and allowed me to see my progress over time. Questions were challenging as well with detailed explanations
Mark R. Jun 2026 · via Trustpilot (opens in a new tab)