Is IT Security more numerical or theory in IT Security?

Are the mock tests here enough to pass IT Security or should I buy more? Is negative marking there in IT Security? Nobody gives a clear answer.