Know the format. 90 multiple-choice questions in 150 minutes, about 100 seconds each. Passing is 450 on a scaled 200-800 score; ISACA states there is a mix of scored and pretest items and that domain results are informational only.
Weight your time. Domain 2 is 46%, Domain 1 is 33%, Domain 3 is 21%.
Be the auditor. The best answer evaluates, requests evidence, or reports. It rarely has the auditor building or operating the control.
Risk first. Audit scope and depth follow risk. Pick the answer that targets the highest-risk area first.
Evidence quality. Prefer evidence that is independent, reliable and obtained directly over assertions.
Independence. Be wary of answers that compromise auditor independence.
Design then operation. First check a control is designed to meet the objective, then test that it operated.