The module said 20 minutes. It took me 42 — and those extra minutes are the whole post. My first run through MISP, the Malware Information Sharing Platform: how threat intel platforms turn one indicator into a resolved IP, a registrant email, and a whole map of an adversary's infrastructure. Plus the search bug I caught in my own technique that a decade with data should have caught sooner.

On June 20, 2026, my ISC2 CC exam session ended at 90 questions — with time still on the clock and no error message. ISC²'s own CAT documentation puts the minimum at 100 items. I'm a data analyst, so I did what I do when something terminates outside its expected parameters: I went looking for the data. Here's what turned out to be noise, and the one thing that didn't.

I failed. Except I didn't. When my ISC2 CC exam stopped at 90 questions, the system gave me bogus results. I could have accepted it. Instead, I found the truth. Now I'm going back in on August 15th to prove it.

The domain I was most afraid of — Network Security — was the one I passed. The ones I felt confident in came back below proficiency. Here's what that taught me about how the ISC2 CC actually tests you.