What is the purpose of certificate revocation?

To encrypt the certificate with a new key

To renew the certificate before it expires

To back up the certificate to a secure location

To invalidate a certificate before its expiration, such as when a private key is compromised

In a tokenization system, where is the mapping between the original sensitive value and the token stored?

In a public key infrastructure (PKI)

In the application's configuration file

What is the primary purpose of data anonymization?

To replace sensitive data with a random token for use in payment processing

To allow data to be restored to its original form when needed

To irreversibly remove or modify personal identifiers so individuals cannot be re-identified

To protect data from unauthorized access during transmission

A company stores customer data in a cloud database encrypted with a customer-managed key. A security auditor requires that the company be able to immediately render the data unreadable if a key is suspected of compromise, and that the process be automated. Which key management practice should the company implement?

Rotate the encryption key on a scheduled basis every 90 days

Back up the key to a separate cloud region and store the backup in a secure vault

Store the key in a cloud KMS and configure automatic key rotation with a short rotation period

Enable automatic key rotation and configure the KMS to disable or delete the key immediately upon a compromise alert

What is the primary purpose of a secrets management solution in a cloud environment?

To manage digital certificates for TLS

To monitor network traffic for malicious activity

To encrypt all data stored in the cloud

To securely store, rotate, and control access to sensitive credentials like API keys and passwords

Certified Cloud Security Professional

Domain 2Objective 3

Design and Apply Data Security Technologies and Strategies CCSP Practice Questions (Page 1)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

12concepts

20%of the exam

Questions 1–5

1foundation · easy
What is the purpose of certificate revocation?
Select an answer first
2foundation · easy
In a tokenization system, where is the mapping between the original sensitive value and the token stored?
Select an answer first
3foundation · easy
What is the primary purpose of data anonymization?
Select an answer first
4application · medium
A company stores customer data in a cloud database encrypted with a customer-managed key. A security auditor requires that the company be able to immediately render the data unreadable if a key is suspected of compromise, and that the process be automated. Which key management practice should the company implement?
Select an answer first
5foundation · easy
What is the primary purpose of a secrets management solution in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.