120 multiple-choice questions covering all 12 requirements, scoping, assessments, and key security domains.