Which statement best describes the difference between a Docker container and a Docker image?

A container includes the operating system kernel, while an image only includes the application code.

An image is a running instance of a container, while a container is the static template used to create images.

A container is a running instance of an image, while an image is the static, immutable template used to create containers.

An image is stored in a registry, while a container is stored in a local cache on the host.

In a cloud application architecture, which component is primarily responsible for generating, storing, and protecting the cryptographic keys used to encrypt data at rest?

A web application firewall (WAF)

A content delivery network (CDN)

A hardware security module (HSM)

A security engineer is evaluating a cloud-based web application that processes customer orders. The application is exposed to the internet and must be protected from common web-based attacks such as SQL injection and cross-site scripting (XSS). Which security control is specifically designed to inspect and filter HTTP traffic between clients and the application to block these attacks?

Intrusion detection system (IDS)

Database activity monitoring (DAM)

Which practice is essential to limit the impact of a compromised encryption key in a cloud application?

Storing keys in the application source code

Disabling key expiration policies

Using the same key for all customers

Which of the following is a common use case for application virtualization?

Providing a full desktop operating system to remote users.

Replacing the hypervisor in a data center to improve hardware utilization.

Creating a sandbox for testing untrusted code that requires full OS isolation.

Running a legacy application that requires an older version of a shared library without affecting other applications.

Certified Cloud Security Professional

Domain 4Objective 6

Comprehend and Apply the Specifics of Cloud Application Architecture CCSP Practice Questions (Page 3)

Part of the Cloud Application Security domain, which accounts for 16% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

13concepts

16%of the exam

Questions 11–15

11foundation · easy
Which statement best describes the difference between a Docker container and a Docker image?
Select an answer first
12foundation · easy
In a cloud application architecture, which component is primarily responsible for generating, storing, and protecting the cryptographic keys used to encrypt data at rest?
Select an answer first
13foundation · medium
A security engineer is evaluating a cloud-based web application that processes customer orders. The application is exposed to the internet and must be protected from common web-based attacks such as SQL injection and cross-site scripting (XSS). Which security control is specifically designed to inspect and filter HTTP traffic between clients and the application to block these attacks?
Select an answer first
14foundation · easy
Which practice is essential to limit the impact of a compromised encryption key in a cloud application?
Select an answer first
15foundation · easy
Which of the following is a common use case for application virtualization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.