In which cloud service model does the cloud provider manage the operating system, middleware, and runtime, while the customer is responsible only for the application and data?
Ccsp Cloud Concepts
Question · Easy
What if a whole datacenter went dark?
Short
A company wants to migrate its existing on-premises ERP system to the cloud with minimal customization required. The IT team wants the vendor to handle all maintenance, patching, and infrastructure management. Which cloud service model is MOST appropriate?
Question · Medium
Introduction & Exam Overview
1.1 Current CCSP Exam Facts
Study guide
According to the Cloud Security Alliance (CSA) Shared Responsibility Model, which security tasks are ALWAYS the responsibility of the cloud customer regardless of the service model (IaaS, PaaS, or SaaS)?
Tech Exam Prep Podcast
Listen on Spotify
Podcast
A government agency requires complete physical isolation of its cloud infrastructure for handling classified information. No other tenants should share the same physical hardware. Which deployment model meets this requirement?
What is the PRIMARY advantage of a hybrid cloud deployment model over a purely private cloud?
Public, private or hybrid cloud?
Which cloud architecture principle involves distributing application components across multiple availability zones to ensure high availability?
1.2 CAT Format, Scoring & Logistics
An organization is designing a cloud architecture that must meet specific regulatory requirements for data residency. Which design consideration is MOST critical?
What is the PRIMARY purpose of the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM)?
An organization is planning a cloud migration using the "7 Rs" framework. They want to move an application to the cloud with minimal changes while optimizing costs. Which migration strategy BEST fits this scenario?
Question · Hard
AWS or YOU?
Which data classification level typically includes data that, if disclosed, could cause serious harm to an organization, its customers, or partners?
Ccsp Cloud Data Security
1.3 Eligibility, Experience & Certification Maintenance
A cloud customer needs to ensure that sensitive data cannot be accessed by cloud provider administrators, even if they have physical access to storage devices. Which control provides this assurance?
Which encryption method protects data while it is being transmitted between a user and a cloud service?
An organization is implementing Bring Your Own Key (BYOK) in a cloud environment. What is the PRIMARY security benefit of this approach?
Which cryptographic key management practice is MOST important when an employee with access to encryption keys leaves the organization?
Domain 1: Cloud Concepts & Architecture Foundations
2.1 Cloud Computing Concepts (Domain 1.1)
A company wants to prevent users from uploading sensitive customer data to unsanctioned cloud storage services. Which solution is MOST appropriate?
Which technique replaces sensitive data elements with non-sensitive substitutes that retain the format and structure of the original data?
An organization needs to ensure that data cannot be recovered from decommissioned cloud storage devices. Which control BEST addresses this requirement?
According to data lifecycle management principles, which action should be taken when data reaches the end of its retention period?
2.2 Cloud Reference Architecture (Domain 1.2)
A company has implemented a Cloud Access Security Broker (CASB) to monitor sanctioned cloud applications. Which feature of CASB is MOST effective for identifying unauthorized cloud service usage (shadow IT)?
What is the PRIMARY security concern when multiple virtual machines from different tenants run on the same physical host in a public cloud?
Ccsp Cloud Platform Infrastructure
Which control helps prevent a compromised virtual machine from attacking other VMs on the same network segment?
In a containerized environment, which security practice is MOST critical for preventing privilege escalation attacks?
2.3 Security Concepts Relevant to Cloud (Domain 1.3)
What is the PRIMARY function of a Virtual Private Cloud (VPC) or Virtual Network (VNet) in cloud environments?
Which network security control is MOST effective for protecting cloud-based web applications from common attacks like SQL injection and cross-site scripting?
In a Zero Trust architecture for cloud environments, which principle is MOST fundamental?
Which security benefit does Infrastructure as Code (IaC) provide when properly implemented?
Domain 1: Secure Design, CSP Evaluation & AI/ML
3.1 Design Principles of Secure Cloud Computing (Domain 1.4)
What is the PRIMARY security advantage of using a Hardware Security Module (HSM) in a cloud environment?
A company is implementing a serverless computing architecture. Which security consideration is UNIQUE to serverless compared to traditional virtual machine deployments?
What is the PRIMARY objective of integrating security into the CI/CD pipeline (DevSecOps)?
Ccsp Cloud Application Security
Which technique involves analyzing source code or compiled code to identify security vulnerabilities without executing the application?
3.2 Evaluate Cloud Service Providers (Domain 1.5)
An organization wants to ensure that third-party libraries and components used in their cloud applications do not contain known vulnerabilities. Which tool or process should they implement?
Which authentication protocol is MOST commonly used for Single Sign-On (SSO) in cloud environments and is based on XML?
What is the PRIMARY security risk of using long-lived access tokens or API keys in cloud applications?
Which access control model grants permissions based on a user's job function or role within the organization?
3.3 AI/ML in Cloud Security (Domain 1.6)
An API in a cloud application is experiencing abuse through excessive requests from legitimate users. Which control is MOST appropriate to address this issue?
Loading more…