Certified Cloud Security Professional
Domain 3Objective 3
Analyze Risks Associated with Cloud Infrastructure and Platforms CCSP Practice Questions (Page 4)
Part of the Cloud Platform and Infrastructure Security domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)
22questions here
5free pages
5concepts
17%of the exam
Questions 16–20
- 16
A company is considering moving a legacy application to the cloud. The application has a known vulnerability that cannot be patched easily. The company decides not to migrate the application and instead keep it on-premises. Which risk treatment strategy is the company applying?
Select an answer first - 17
A security analyst is reviewing the configuration of a cloud-based virtual machine. The analyst finds that the VM has a public IP address and a network security group that allows inbound RDP traffic from any source. Which cloud-specific vulnerability is most directly present?
Select an answer first - 18
When an organization decides that the cost of mitigating a risk is higher than the potential loss, and thus chooses to accept the risk, which strategy is being applied?
Select an answer first - 19
A company is evaluating the risk of a distributed denial-of-service (DDoS) attack on its public-facing web application. The security team estimates that such an attack would cause significant financial loss and reputational damage. The company decides to purchase DDoS protection services from a third-party provider. Which risk treatment strategy is the company applying?
Select an answer first - 20
A company's cloud-based application experienced a distributed denial-of-service (DDoS) attack that overwhelmed the application's resources, causing it to become unavailable to legitimate users. Which type of cloud threat does this scenario describe?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.