Which security control is specifically designed to prevent a virtual machine from accessing physical memory regions assigned to other virtual machines on the same host?

Memory protection and isolation

Which hardware feature is commonly used by hypervisors to enforce memory isolation between virtual machines with low overhead?

Second Level Address Translation (SLAT)

Unified Extensible Firmware Interface (UEFI)

In a virtualized cloud environment, which component is responsible for enforcing CPU isolation between virtual machines running on the same physical host?

The virtual machine monitor's device driver

Which practice is essential to ensure that virtual storage encryption keys remain protected from unauthorized access?

Embedding keys in the virtual disk file header

Storing keys in the same virtual machine as the encrypted data

Sharing keys with all administrators for convenience

Using a dedicated key management service

Certified Cloud Security Professional

Domain 5Objective 1

Build and Implement Physical and Logical Infrastructure for Cloud Environment CCSP Practice Questions (Page 1)

Part of the Cloud Security Operations domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

10concepts

17%of the exam

Questions 1–5

1foundation · easy
Which security control is specifically designed to prevent a virtual machine from accessing physical memory regions assigned to other virtual machines on the same host?
Select an answer first
2foundation · easy
Which virtual network component is used to define the allowed source and destination IP addresses, ports, and protocols for traffic to and from a cloud resource?
Select an answer first
3foundation · easy
Which hardware feature is commonly used by hypervisors to enforce memory isolation between virtual machines with low overhead?
Select an answer first
4foundation · easy
In a virtualized cloud environment, which component is responsible for enforcing CPU isolation between virtual machines running on the same physical host?
Select an answer first
5foundation · easy
Which practice is essential to ensure that virtual storage encryption keys remain protected from unauthorized access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.