CORES Practice Tests: Free CORES Exam Questions & Study Guide 2026

If you're preparing for the CORES certification, using a praxis core practice test is the single most effective strategy for building both knowledge and exam-day confidence. The Certified Operational Risk Executive Specialist exam tests deep competency across operational risk frameworks, Basel III/IV capital requirements, governance structures, model risk, and quantitative methods — domains that demand systematic, repeated exposure before you walk into the testing center. Starting your preparation with targeted practice questions reveals exactly where your knowledge gaps are so you can focus your study hours where they count most.

The CORES exam is administered by the Global Association of Risk Professionals (GARP) and is widely recognized as a senior-level credential for professionals who manage or oversee operational risk at financial institutions, insurance companies, regulatory agencies, and large corporates. Unlike entry-level certifications, CORES tests your ability to apply frameworks to complex, real-world scenarios rather than simply recall definitions. That applied emphasis is why passive reading alone almost never produces a passing score — you need to practice retrieving and applying concepts under timed, exam-like conditions.

One of the biggest mistakes candidates make is waiting until the final two weeks of their study plan to attempt practice questions. Research in cognitive science consistently shows that retrieval practice — the act of actively pulling information from memory — strengthens long-term retention far more effectively than re-reading notes or slides. By weaving practice tests into every week of your study schedule, you convert passive familiarity into durable, exam-ready knowledge that holds up under pressure.

This guide walks you through everything you need to know about CORES practice tests in 2026: what the exam looks like, which topic domains carry the most weight, how to structure your preparation timeline, and how to interpret your practice scores so you know when you're genuinely ready to schedule the real exam. Whether you're six months out or six weeks away from your test date, the strategies here apply at every stage of preparation.

The CORES exam covers six major content areas: Operational Risk Governance, Risk Identification and Assessment, Operational Risk Measurement, Operational Risk Management and Mitigation, Basel Framework and Capital Requirements, and Governance Frameworks including Risk Appetite. Each domain carries a specific exam weight, meaning some topics deserve a proportionally larger slice of your study time. Understanding this weighting before you build your study plan is critical — it prevents you from over-preparing in low-weight areas while under-preparing for the domains that drive your score.

Candidates who pass CORES on their first attempt consistently report two common habits: they completed at least three to four full-length timed practice exams before test day, and they reviewed every wrong answer in detail rather than just noting the correct response. Both habits activate different aspects of the learning process — timed exams build pacing and pressure tolerance, while deep answer review builds conceptual understanding. Together, they produce the kind of robust preparation that translates directly to a passing score on exam day.

Throughout this guide, you will find free practice quizzes covering every major CORES domain, along with a detailed breakdown of the exam format, a domain-by-domain study checklist, and practical tips drawn from candidates who have earned the credential. Use these resources together as an integrated system rather than picking individual pieces — the combination of structured content review, active practice testing, and targeted gap analysis is what separates candidates who pass on the first attempt from those who need to retake.

Understanding exactly what CORES practice tests cover — and why each domain appears on the exam — helps you move beyond rote memorization toward genuine conceptual mastery. The exam is built around GARP's official CORES curriculum, which spans six interconnected knowledge areas designed to reflect the full lifecycle of operational risk management at a senior professional level. Unlike narrowly technical certifications, CORES tests both the analytical and the organizational dimensions of risk — meaning you'll encounter questions that blend quantitative methods with governance principles in a single scenario.

The Risk Identification and Assessment domain carries the highest single weighting at 20% of the exam. This domain covers the full suite of operational risk identification tools including Risk and Control Self-Assessments (RCSAs), scenario analysis, internal and external loss data collection, and business environment and internal control factors (BEICFs). Questions in this domain often present a realistic institutional scenario and ask you to identify the most appropriate risk identification approach, critique a proposed RCSA methodology, or evaluate the quality of a loss data collection program.

Candidates frequently underestimate this domain because the tools sound familiar — but exam questions test nuanced application, not surface-level awareness.

Operational Risk Governance and Risk Management and Mitigation each carry 18% of the exam weight, making them jointly the largest combined block on the test. Governance questions focus on topics like the three lines of defense model, board and senior management responsibilities, risk culture, and the role of the operational risk function within a broader enterprise risk management framework. Risk management and mitigation questions address key risk indicator design, risk tolerance thresholds, insurance as a risk transfer tool, outsourcing and third-party risk, business continuity management, and the treatment of tail risks that standard quantitative models may not fully capture.

The Operational Risk Measurement domain at 17% is often the most technically demanding for candidates whose backgrounds are primarily in qualitative risk management. This domain tests the standardized measurement approaches under Basel including the Basic Indicator Approach (BIA), the Standardized Approach (SA), the Alternative Standardized Approach (ASA), and the Advanced Measurement Approach (AMA) — plus the newer Standardized Measurement Approach (SMA) introduced under Basel IV. You'll also encounter questions on loss distribution approaches (LDA), Monte Carlo simulation concepts, extreme value theory, and the statistical properties of operational loss data such as heavy tails and data sparsity challenges.

The Basel Framework and Capital Requirements domain at 15% requires you to understand how operational risk fits within the broader Basel regulatory capital framework. This includes Pillar 1 minimum capital requirements, Pillar 2 supervisory review, Pillar 3 disclosure requirements, the calculation of the Business Indicator Component (BIC) under the SMA, the Internal Loss Multiplier (ILM), and the transitional arrangements for banks moving from AMA to SMA under Basel IV. Regulatory capital questions are frequently paired with scenario-based calculations, so you need to be comfortable with the arithmetic behind the capital charge formulas, not just the conceptual framework.

The Governance Frameworks and Risk Appetite domain at 12% rounds out the exam with questions on enterprise-wide risk appetite frameworks, risk appetite statements (RAS), risk tolerance and capacity, the integration of operational risk appetite into business decision-making, and the interaction between operational risk governance and broader ERM structures. Many candidates find this domain more intuitive than the quantitative sections, but the exam tests precision — questions often hinge on distinguishing between risk appetite (what you're willing to accept), risk tolerance (acceptable variation), and risk capacity (the maximum risk the institution can absorb).

Across all six domains, the CORES exam emphasizes scenario-based application over definitional recall. When you work through practice questions, pay close attention not just to whether your answer was right or wrong but to the reasoning path the question demanded.

Many CORES questions present two plausible answer choices — the correct one reflects a senior practitioner's judgment about what matters most in a complex institutional context, while the distractor reflects a technically accurate but incomplete perspective. Building the habit of articulating why each wrong answer is wrong — not just why the correct answer is right — accelerates the kind of applied judgment that distinguishes passing candidates.

Understanding CORES pass rates and exam scoring helps you set realistic expectations and interpret your practice exam results accurately. GARP does not publicly disclose the official CORES pass rate, which is common practice among professional certification bodies — they use scaled scoring rather than a fixed percentage threshold to ensure fairness across different exam administrations. However, based on candidate reports and industry discussions, the first-time pass rate for CORES is estimated to be in the 50-60% range, which positions it as a genuinely challenging credential that requires serious preparation rather than casual study.

GARP uses a scaled scoring methodology for CORES, meaning your raw score (number of questions correct) is converted to a scaled score that accounts for slight differences in difficulty across exam versions administered on different dates.

The passing scaled score threshold is not published, but candidates who score above 70% on well-calibrated practice exams — meaning practice exams drawn from the same domain distribution as the real test — are generally well-positioned to pass. Be cautious of practice exams that skew heavily toward definitional questions rather than scenario-based application questions, as these can produce inflated practice scores that don't translate to exam-day performance.

When interpreting your practice exam results, look beyond the overall percentage score to your domain-by-domain performance breakdown. A candidate scoring 75% overall but only 55% on Operational Risk Measurement faces a materially different preparation challenge than a candidate scoring 75% overall with balanced performance across all domains. The domain breakdown tells you exactly where to concentrate your remaining study hours rather than spreading your time evenly across material you already know well. Most strong practice platforms, including the quizzes on this site, organize questions by domain specifically to enable this type of targeted analysis.

Time management is a critical but often neglected dimension of CORES preparation. The exam gives you three hours for 100 questions, which works out to an average of 1.8 minutes per question. That sounds comfortable until you encounter a complex scenario question that requires reading a 150-word vignette, identifying the key risk issue, evaluating four answer choices, and applying a specific framework or formula.

Budget your time so that straightforward questions receive 60-90 seconds while scenario-heavy questions receive up to 3 minutes — and mark complex questions for review rather than spending more than 4 minutes on any single item during your first pass through the exam.

Candidates who have sat for the CORES exam frequently note that the exam rewards confident, decisive test-taking more than agonizing second-guessing. When you have narrowed a question down to two answer choices and genuinely cannot distinguish between them, trust the reasoning you've built through your preparation rather than overthinking. Statistically, candidates who change answers on borderline questions from their initial selection to a different choice perform slightly worse than those who trust their first instinct — a pattern that holds across most professional certification exams and is consistent with the literature on expertise under uncertainty.

After each practice session, track your performance trend over time rather than fixating on any single score. A candidate who scores 58% on their first full practice exam and 69% on their fourth is on a strong trajectory even though the final score is below the estimated passing threshold — the improvement curve matters as much as the absolute number.

Conversely, a candidate who scores 65% on their first exam and 64% on their fourth hasn't absorbed additional knowledge from intervening study, which signals that a different study approach is needed. Regular, honest self-assessment through timed practice testing is the foundation of effective CORES preparation.

The relationship between practice exam scores and actual exam outcomes is strong but not deterministic. Candidates who consistently score 70-75%+ on high-quality, domain-weighted practice exams under timed conditions have a strong probability of passing the actual CORES exam. Candidates who score in the 60-68% range are in a borderline zone where additional targeted study in weak domains can meaningfully shift the outcome.

Candidates scoring below 60% on multiple full-length practice exams typically need to revisit their study approach — either extending their timeline, adding structured content review before additional practice testing, or seeking out a study partner or instructor who can help diagnose persistent conceptual gaps.

Building an effective study timeline for the CORES exam requires honest assessment of your starting knowledge base, your available study hours per week, and your target exam date. Most candidates who pass on the first attempt invest between 150 and 200 total study hours over a period of three to six months.

Candidates with strong backgrounds in Basel regulatory capital or operational risk governance at financial institutions can often prepare effectively in 150 hours, while candidates whose experience has been in adjacent fields like general risk management, internal audit, or compliance may need closer to 200 hours to build fluency in the more technical domains.

A twelve-week study plan provides a solid foundation for most candidates. Weeks one through three should focus on building a conceptual map of all six domains through the official GARP curriculum materials, supplementing with industry references like the Basel Committee's operational risk supervisory guidelines and the IIF's sound practices papers.

Weeks four through seven should shift toward active practice testing — working through quizzes organized by domain, tracking your performance, and conducting deep-dive reviews of every wrong answer. Weeks eight through ten should focus on your weakest domains based on practice performance data, using targeted reading and additional practice questions. Weeks eleven and twelve should be reserved for full-length timed practice exams and light review of key formulas and frameworks.

For the Governance Frameworks and Risk Appetite domain specifically, candidates often benefit from reviewing real-world risk appetite statements published by major financial institutions in their annual reports or regulatory filings. The Basel Committee and the Financial Stability Board have published extensive guidance on sound risk appetite frameworks that is publicly available and directly maps to CORES exam objectives.

Reading these primary sources alongside your study materials helps you understand not just what the frameworks say but why they were designed the way they were — the regulatory intent behind governance requirements often appears in exam questions in the form of scenario-based judgment calls about whether a firm's governance structure is adequate or deficient.

The model risk and quantitative methods domain requires a different study approach than governance topics. Here, the most effective preparation combines conceptual reading with numerical practice. For each measurement approach covered in the curriculum — BIA, SA, ASA, AMA, SMA — you should be able to answer three types of questions: (1) describe the approach and its key inputs, (2) identify when a regulator would require or prefer this approach, and (3) critique the approach's limitations.

CORES questions in this domain rarely ask you to perform complex calculations from scratch, but they frequently present calculations with errors or questionable assumptions and ask you to identify the flaw. Developing the instinct to look critically at given numbers, not just apply formulas, is a key exam-day skill.

One underutilized study strategy is exam simulation under realistic conditions. Many candidates do practice questions on their commute, during lunch, or in short 20-minute sessions — which builds knowledge but doesn't build exam stamina or pacing discipline. In the final month of your preparation, schedule at least two full three-hour blocks where you sit down with a 100-question practice exam, silence all notifications, and work straight through without breaks.

The physiological experience of sustained concentration for three hours is different from what most people encounter in their daily work, and practicing it deliberately ensures that cognitive fatigue doesn't become a variable on exam day that your preparation didn't account for.

Connecting with other CORES candidates through GARP's local chapter events, LinkedIn study groups, or online risk management forums can provide both accountability and insight. Candidates who have recently passed the exam often share perspective on which topics the exam emphasizes most heavily in a given exam cycle, what types of scenario questions appear frequently, and what study resources they found most valuable. This community intelligence doesn't replace systematic preparation — but it can help you calibrate where to invest your final study hours and reduce the uncertainty that comes from preparing for an exam with limited official practice materials.

Finally, maintaining perspective throughout your preparation matters. The CORES credential signals that you have achieved senior-level mastery of operational risk management — a goal worth taking seriously. But the exam is a test of the knowledge and judgment you have built over your career, supplemented by structured study.

Candidates who approach preparation with curiosity — genuinely engaging with the material rather than treating it as an obstacle to be overcome — consistently report not only better exam outcomes but also stronger on-the-job performance after earning the credential. The goal of your preparation isn't just to pass a test; it's to become the kind of operational risk leader the CORES credential is designed to certify.

Exam day performance depends as much on logistics and mental preparation as on content knowledge. Begin your exam day preparations the evening before: confirm your test center address, parking or transit options, required identification documents, and the check-in time specified in your registration confirmation.

GARP's testing partner (Pearson VUE) enforces strict check-in protocols — arriving late, even by a few minutes, can result in forfeiture of your exam fee without opportunity to reschedule the same day. Lay out your required identification and any permitted personal items the night before so that morning logistics don't create unnecessary stress before a three-hour cognitive challenge.

During the exam, your first pass through all 100 questions should prioritize forward momentum over perfection. Answer every question you can respond to confidently within 90 seconds, flag any question that requires more thought or calculation, and move on without stopping to ruminate.

By completing a first pass through the full exam, you accomplish two things simultaneously: you bank the points from questions you know well, and you expose yourself to the full range of topics being tested, which can sometimes activate recall that helps you answer flagged questions on your second pass. Candidates who get stuck on early questions and fall behind the pacing never get the benefit of this second-pass opportunity.

For scenario-based questions — which represent a large portion of the CORES exam — develop a consistent reading strategy. Read the question stem and answer choices before reading the full scenario vignette, so you know exactly what information you're looking for as you read. This reverse-reading technique prevents you from getting lost in scenario details that aren't relevant to the specific question being asked.

Identify the key risk concept or framework being tested, apply it to the scenario, and choose the answer that best reflects how a competent senior risk professional would respond — not necessarily the answer that contains the most technically sophisticated content.

Answer flagging is a powerful tool when used strategically. Flag questions where you have genuine uncertainty between two choices, not questions where you simply felt mild discomfort. When you return to flagged questions on your second pass, limit yourself to one additional minute per question.

The additional thinking time almost never produces new information that resolves the uncertainty — what it does produce is additional anxiety that can impair your judgment on subsequent questions. If you genuinely cannot distinguish between two choices after one additional minute, commit to your instinct and move on. Second-pass rumination almost always costs more time than it's worth.

The final 15 minutes of your exam should be spent confirming that all questions are answered — including any you may have accidentally skipped during rapid first-pass navigation — rather than reconsidering answers you've already committed to. Unanswered questions receive zero credit, while a guessed answer at least carries probability of earning a point. On a 100-question exam, leaving even three questions unanswered when you could have guessed is a material scoring disadvantage. Review your answer sheet or on-screen response grid systematically in the final minutes to confirm complete coverage before submitting.

After submitting your exam, you will typically receive a preliminary pass/fail indication at the testing center before leaving. Official score reports, including your domain-by-domain performance breakdown, are released by GARP within several weeks of your exam date.

If you do not pass on your first attempt, the domain performance report is invaluable — it tells you precisely which knowledge areas need the most work before your retake, allowing you to build a targeted preparation plan rather than repeating the same broad preparation approach that didn't produce a passing score. Many successful CORES holders passed on their second attempt after using their first attempt's score report as a precise study guide for their retake.

Regardless of the outcome, completing the CORES examination is a meaningful professional milestone. The preparation process itself — working through the full curriculum, engaging with real-world risk frameworks, and testing your applied judgment through hundreds of practice questions — builds the kind of deep, integrated operational risk knowledge that makes you more effective in your day-to-day work, not just more credentialed.

The candidates who get the most value from CORES preparation are those who treat the exam not as a hurdle to clear but as a structured opportunity to consolidate and extend the expertise they've built over years of professional practice.