The actual exam consists of multiple-choice questions and performance-based simulations. The multiple-choice questions assess your knowledge on various topics related to security concepts, threats, vulnerabilities, technologies, and tools. On the other hand, performance-based simulations require you to perform specific tasks or solve problems using simulated environments.