Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.
CISA is 150 multiple-choice questions in four hours, many asking for the FIRST, BEST or MOST important action from an auditor's point of view. We compared the main options on question style, official coverage, volume and price.
Start with ISACA's free 10-question quiz, use ISACA's QAE database as your main bank, then add Hemang Doshi's Udemy tests for extra full-length practice in different wording.
| Practice test | Best for | Questions | Price |
|---|---|---|---|
 Free CISA Practice Quiz | Free first look | 10 | Free |
| CISA Questions, Answers & Explanations Database | Official question bank | 1,070 | $399 |
 Practice Tests to prepare for CISA Exam (Updated 2026) | Extra full-length tests | 750 | $20 |
 ISACA CISA Question Bank | Study on your phone | 1,200 | $21/month |
 CISA Certified Information Systems Auditor Practice Tests | Practice test book | 700+ | $47 |
 CISA Practice Test | Single timed exam | 150 | $99 |
Ten questions in ISACA's own style, each with an explanation of why the best answer fits and why the others do not. You submit a short contact form to see your results.
Great fit if you want a free look at ISACA's wording before paying for a question bank.
Poor fit if you need volume or a timed run; use the QAE database.
ISACA's own bank explains every answer choice, lets you build sessions by domain and subcategory, and tracks results by domain. It includes three full-length timed practice exams, flashcards and a study planner.
Great fit if you want the closest thing to ISACA's wording and a bank you can work through domain by domain.
Poor fit if you want a cheaper second bank for fresh questions; see Doshi's tests.
Five 150-question tests with explanations. Candidates use them for extra full-length runs after the QAE, but several score noticeably lower here than on the QAE and call some wording awkward.
Great fit if you have worked through the QAE and want more full-length tests at a low price.
Poor fit if you want ISACA's phrasing; candidates say the QAE matches the exam better.
A phone-friendly bank of 1,200 questions with subject quizzes and a premium mock exam. One candidate reports passing CISA on it alone; the QAE remains the usual main bank.
Great fit if you study in short sessions on your phone and want a low-cost monthly bank.
Poor fit if you want ISACA's own wording; use the QAE database.
A 2025 practice book with 700+ questions by domain and two full-length 150-question exams. Answer explanations are brief.
Great fit if you prefer a book, or want a different publisher's questions after the QAE.
Poor fit if you want detailed rationale for every option; the QAE explains each choice.
One 150-question exam split across the five domains in the real proportions, with a timed certification mode and a customizable practice mode.
Great fit if you want a single extra timed run in the real domain mix.
Poor fit if you want volume; it is one exam, so use the QAE or Pocket Prep.
ISACA: CISA QAE database ↗ISACA: CISA exam content outline ↗Reddit: Doshi tests vs QAE ↗Reddit: QAE accuracy ↗Reddit: passed, six-month plan ↗
ISACA offers a free 10-question practice quiz with explanations; you submit a short form to see your results. ISACA does not publish a larger free bank, and free question lists elsewhere vary widely in quality.
Candidates most often call it the closest practice available, with the same phrasing and reasoning style. Even so, some who scored 90%+ by repetition failed, so judge readiness by how well you explain the answers, not by your score.
ISACA charges $399 for non-members and $299 for members for a six-month subscription, with an extension available. Membership costs $145 a year plus chapter dues but also lowers the exam fee.
ISACA sets no number. Most candidates finish the QAE once or twice and take its three timed exams, then add one or two full-length tests from another source before booking.