Certified Cloud Security Professional
Domain 3Objective 3
Analyze Risks Associated with Cloud Infrastructure and Platforms CCSP Practice Questions (Page 1)
Part of the Cloud Platform and Infrastructure Security domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)
22questions here
5free pages
5concepts
17%of the exam
Questions 1–5
- 1
A security team is conducting a risk assessment for a new cloud-based data analytics platform. They are listing all data assets, the systems that process them, and the potential threats that could affect them. Which phase of the risk management process are they performing?
Select an answer first - 2
Which scenario best illustrates a misconfiguration vulnerability in a cloud environment?
Select an answer first - 3
A company has identified a risk of a data breach due to weak access controls on a cloud database. The company decides to implement multi-factor authentication (MFA) for all users who access the database. Which risk treatment strategy is the company applying?
Select an answer first - 4
Which cloud threat involves an attacker gaining unauthorized access to a user's account credentials?
Select an answer first - 5
A company's cloud environment was attacked by a distributed denial-of-service (DDoS) attack. The attack was mitigated by the cloud provider's DDoS protection service. The company did not incur any financial loss. Which risk treatment strategy did the company effectively apply?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.