500
Study Questions
Study Questions
2560
5 Star Reviews
5 Star Reviews
4.8
Avg App Store Rating
Avg Rating
Avg App Store Rating
Avg Rating
Prep with the pros
This is what kicking down that door to your success and chopping it into tiny pieces feels like. At Pocket Prep, we’ve got your back because all of our practice questions are written by industry pros, and based on the latest exam blueprints available and each question comes with detailed explanation.
View all 4 ISACA CCA™ Subjects
Evaluating OSC Against CMMC Level 2
89%
8 of 9 Correct
CMMC Level 2 Assessment Scoping
56%
5 of 9 Correct
CMMC Assessment Process (CAP)
55%
6 of 11 Correct
Assessing CMMC Level 2 Practices
38%
3 of 8 Correct
Our apps identify your trouble areas and give you the tools to turn them around.
Built for the busy
Study wherever, whenever with these quiz types:
Question of the Day
The quickest way to do a little studying everyday.
Quick 10 Quiz
10 questions randomly selected from the question bank.
Missed Questions Quiz
Retake questions you’ve missed and improve your overall score.
Level Up Quiz
Gamify your learning with progressively harder quizzes.
Weakest Subject Quiz
Focus on questions from your lowest subject score.
Timed Quiz
Have 5 or 10 minutes to invest in some study time?
Build Your Own
Select how many questions and what subjects to focus on.
See Your Progress
Detailed results show where you're doing well and where you should focus.
Gauge Where You Are
Your overall study score and how you compare to others.
Keep Up the Streak
A little each day helps you stay on track for your exam.
Achieve proficiency in cybersecurity assessment and 
secure your role in the CMMC ecosystem by earning the ISACA CCA™ credential.
secure your role in the CMMC ecosystem by earning the ISACA CCA™ credential.
The ISACA CMMC Certified Assessor (CCA™) exam is administered by ISACA, the CMMC Assessor and Instructor Certification Organization (CAICO) for the Department of War's (DoW) Cybersecurity Maturity Model Certification (CMMC) program. It is designed for professionals who perform formal CMMC Level 2 certification assessments of defense contractors.
This certification validates the advanced skills needed to evaluate evidence, validate security controls, conduct interviews, and score CMMC Level 2 practices against their assessment objectives. The exam covers evaluating organizations against Level 2 requirements, assessment scoping, the CMMC Assessment Process (CAP), and assessing Level 2 practices. It is valuable for assessment, audit, and compliance roles in the defense sector. CCAs work with Certified Third-Party Assessment Organizations (C3PAOs) to conduct formal evaluations of a company's cybersecurity practices. Their findings determine whether the company achieves CMMC Level 2 certification. This role is critical to maintaining the integrity and security of the defense supply chain.
To earn the CCA, candidates must complete mandatory CAICO-approved CCA training and hold an active ISACA CCP™ certification. They also need a qualifying DoD 8140 certification at the intermediate or advanced level for the Security Control Assessor (612) work role, and a Tier 3 determination from the DoW. Candidates must pass the CCA exam and submit an application documenting the required experience: at least three years of cybersecurity experience and one year of assessment or audit experience. They must also agree to follow ISACA's Code of Professional Ethics and CPE Policy.
The exam consists of 150 multiple-choice questions with a time limit of 4 hours, delivered by PSI at a test center or through remote proctoring. Performance is reported on a scaled score from 200 to 800, and a scaled score of 500 or higher is required to pass. The CCA certification runs on a three-year cycle, and holders must earn CPE hours to maintain it.
CCA™ General Exam Info
CCP™ and CCA™ Exam Candidate Guide
CCA™ Exam Content Outline
This certification validates the advanced skills needed to evaluate evidence, validate security controls, conduct interviews, and score CMMC Level 2 practices against their assessment objectives. The exam covers evaluating organizations against Level 2 requirements, assessment scoping, the CMMC Assessment Process (CAP), and assessing Level 2 practices. It is valuable for assessment, audit, and compliance roles in the defense sector. CCAs work with Certified Third-Party Assessment Organizations (C3PAOs) to conduct formal evaluations of a company's cybersecurity practices. Their findings determine whether the company achieves CMMC Level 2 certification. This role is critical to maintaining the integrity and security of the defense supply chain.
To earn the CCA, candidates must complete mandatory CAICO-approved CCA training and hold an active ISACA CCP™ certification. They also need a qualifying DoD 8140 certification at the intermediate or advanced level for the Security Control Assessor (612) work role, and a Tier 3 determination from the DoW. Candidates must pass the CCA exam and submit an application documenting the required experience: at least three years of cybersecurity experience and one year of assessment or audit experience. They must also agree to follow ISACA's Code of Professional Ethics and CPE Policy.
The exam consists of 150 multiple-choice questions with a time limit of 4 hours, delivered by PSI at a test center or through remote proctoring. Performance is reported on a scaled score from 200 to 800, and a scaled score of 500 or higher is required to pass. The CCA certification runs on a three-year cycle, and holders must earn CPE hours to maintain it.
The ISACA CCA™ exam is 4 hours and consists of 150 multiple-choice questions. A passing score is 500 points.
IT & Cybersecurity
ISACA CCA™ is part of our IT & Cybersecurity Pocket Prep that contains prep content for 26 other IT & Cybersecurity exams.
View
other 26 IT & Cybersecurity exams
AWS Certified Cloud Practitioner
Certified Cloud Practitioner
Cisco CCNA
Cisco Certified Network Associate
Cisco CCNP Enterprise
Certified Network Professional
CompTIA® A+
Entry Level Computer Technician
CompTIA® SecurityX
Advanced Security Practitioner
CompTIA® Cloud+
Certified Cloud Professional
CompTIA® CySA+
Cybersecurity Analyst
CompTIA® Tech+
Certified Tech Professionals
CompTIA® Linux+
Linux Certified IT Professional
CompTIA® Network+
IT Professional Network Knowledge
CompTIA® PenTest+
Certified Penetration Tester
CompTIA® Project+
Project Management of Software Development
CompTIA® Security+
IT Security and Cybersecurity
CompTIA® Server+
Certified Server Administrator
ISACA CCP™
CMMC Certified Professional™
EC-Council® CEH™
Certified Ethical Hacker™
ISACA CGEIT®
Certified in the Governance of Enterprise IT®
ISACA CISA®
Certified Information Systems Auditor®
ISACA CISM®
Certified Information Security Manager™
ISACA CRISC®
Certified in Risk and Information Systems Control™
ISC2 CC®
Certified in Cybersecurity
ISC2 CCSP®
Certified Cloud Security Professional
ISC2 CGRC℠
Governance, Risk and Compliance Certification
ISC2 CISSP®
Certified Information Systems Security Professional
ISC2 CSSLP®
Certified Secure Software Lifecycle Professional
ISC2 SSCP®
Systems Security Certified Practitioner
Show up
confident
on test day
confident
on test day
500 Questions
Multiple Quiz Modes
Pass Guarantee
Pocket Prep, Inc. is neither affiliated with nor endorsed by any of the organizations listed. All organizational and test names are trademarks of their respective owners.
