Certified Cloud Security Professional
Domain 1Objective 2
Describe Cloud Reference Architecture CCSP Practice Questions (Page 2)
Part of the Cloud Concepts, Architecture and Design domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)
20questions here
4free pages
6concepts
17%of the exam
Questions 6–10
- 6
A company is evaluating a move from an on-premises data center to a public cloud IaaS provider. Their compliance team requires that all data be encrypted at rest and in transit, and that they be able to audit who accessed the data. The security team wants to ensure that if they terminate the contract, they can retrieve all their data in a usable format. Which shared consideration is the security team primarily addressing?
Select an answer first - 7
A company is using a SaaS CRM application. They are concerned about vendor lock-in and want to ensure they can move their customer data to another CRM provider if needed. They also need to integrate the CRM with their on-premises ERP system. Which shared consideration is the company primarily addressing with the integration requirement?
Select an answer first - 8
A development team wants to deploy a web application without managing servers or the operating system. They want to focus solely on writing code and uploading it, and they expect the platform to automatically handle scaling and high availability. They do not need to install any custom software on the underlying OS. Which cloud service capability type and category should they choose?
Select an answer first - 9
A healthcare organization is migrating a legacy patient-portal application to the cloud. The application requires a custom database schema, a specific Java runtime version, and the ability to install a proprietary monitoring agent directly on the operating system. The organization wants to minimize the amount of infrastructure management they perform, but they cannot change the application code. Which cloud service category best fits this requirement?
Select an answer first - 10
A startup is building a new application and needs to choose a cloud service model. They have a small team with limited DevOps expertise. They need to deploy a custom application with a specific database, but they want to avoid managing servers, patching the OS, or configuring the network. However, they also need to install a third-party agent that requires root access to the operating system. Which service model should they choose?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.