A company is migrating a legacy web application to the cloud. The security team wants to establish a baseline for secure development practices. They have limited budget and need a framework that provides a prioritized list of the most critical web application security risks to guide their initial training. Which framework should they use to prioritize their training topics?

OWASP Top 10 API Security Risks

Which OWASP Top 10 risk for LLM applications is most concerned with the model inadvertently revealing confidential data that was part of its training data?

Sensitive Information Disclosure

Which of the following is a common pitfall in cloud application development where developers rely on hard-coded credentials or fail to implement proper authentication mechanisms?

Lack of proper identity management

Certified Cloud Security Professional

Domain 4Objective 1

Advocate Training and Awareness for Application Security CCSP Practice Questions (Page 3)

Part of the Cloud Application Security domain, which accounts for 16% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

16%of the exam

Questions 11–15

11application · medium
A company is migrating a legacy web application to the cloud. The security team wants to establish a baseline for secure development practices. They have limited budget and need a framework that provides a prioritized list of the most critical web application security risks to guide their initial training. Which framework should they use to prioritize their training topics?
Select an answer first
12foundation · easy
A cloud security team wants to assess the security of a web application that handles sensitive customer data. Which framework would be most appropriate to use to verify the application's security controls against a set of requirements?
Select an answer first
13foundation · easy
Which OWASP Top 10 risk for LLM applications is most concerned with the model inadvertently revealing confidential data that was part of its training data?
Select an answer first
14application · medium
A security analyst is reviewing a cloud application and finds that it uses weak encryption algorithms to protect sensitive data. Which OWASP Top 10 risk does this represent?
Select an answer first
15foundation · easy
Which of the following is a common pitfall in cloud application development where developers rely on hard-coded credentials or fail to implement proper authentication mechanisms?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Advocate Training and Awareness for Application Security CCSP Practice Questions (Page 3)

Questions 11–15

A cloud security team wants to assess the security of a web application that handles sensitive customer data. Which framework would be most appropriate to use to verify the application's security controls against a set of requirements?

Which OWASP Top 10 risk for LLM applications is most concerned with the model inadvertently revealing confidential data that was part of its training data?

A security analyst is reviewing a cloud application and finds that it uses weak encryption algorithms to protect sensitive data. Which OWASP Top 10 risk does this represent?

Which of the following is a common pitfall in cloud application development where developers rely on hard-coded credentials or fail to implement proper authentication mechanisms?

Keep studying — Cloud Application Security