Contribute a question

If you know an exam well, write one question. We review each one by hand, check the source, and add the ones that hold up to the free practice set. Your name goes on it if you want it there.

  • One scenario, four options, one correct answer.
  • A primary source: the vendor's objectives, a NIST publication, an RFC, MITRE. Not a blog post.
  • An explanation that says why the right option is right and why the others are not.





A situation someone would face on the job, ending in the question.





Correct answer



Why the correct option is correct, and what is wrong with each of the others.



For example: NIST SP 800-63B, section 5.1.1.2