A company runs a relational database on a VM. The database files are stored on a block storage volume. The company needs to ensure that the data is protected against a regional outage. Which strategy should they implement?

Take frequent snapshots of the volume and store them in the same region

Replicate the block storage volume to another region using asynchronous replication

Attach the volume to a VM in another region

Use ephemeral storage for the database files

A company needs to provide a shared file system to a group of Linux VMs in the same region. The VMs need low-latency access to the files, and the data must be encrypted at rest. Which storage solution should they choose?

Block storage volumes attached to each VM

Cloud file storage with encryption enabled

Object storage mounted via a gateway

A company is designing a storage architecture for a new application that will store both structured data in a database and unstructured files. The application is expected to grow rapidly. The company wants to minimize operational overhead and ensure that data is encrypted at rest. Which approach should they choose?

Use a NoSQL database for both structured and unstructured data

Run a database on a VM with block storage and use file storage for unstructured files

Store all data in block storage volumes

Use a managed relational database service for structured data and object storage for unstructured files, with encryption enabled on both

A company runs a stateful application on a single VM in a public cloud. The application writes critical data to the VM's local disk. The security team is concerned about data loss if the VM fails or is terminated. Which control should the company implement to mitigate this risk?

Increase the VM's local disk size to avoid running out of space

Configure the VM to reboot automatically after a failure

Enable automatic backups on the VM's local disk

Move the data to a network-attached block storage volume and take regular snapshots

A company stores sensitive customer data in an object storage bucket. The data is encrypted with a customer-managed key. The security team discovers that the key was compromised. What is the most effective way to protect the data going forward?

Enable versioning on the bucket

Change the bucket permissions to private

Delete the compromised key and restore the data from backup

Rotate the key immediately and re-encrypt the data with the new key

Certified Cloud Security Professional

Domain 2Objective 2

Design and Implement Cloud Data Storage Architectures CCSP Practice Questions (Page 1)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

2concepts

20%of the exam

Questions 1–5

1application · medium
A company runs a relational database on a VM. The database files are stored on a block storage volume. The company needs to ensure that the data is protected against a regional outage. Which strategy should they implement?
Select an answer first
2application · medium
A company needs to provide a shared file system to a group of Linux VMs in the same region. The VMs need low-latency access to the files, and the data must be encrypted at rest. Which storage solution should they choose?
Select an answer first
3expert · hard
A company is designing a storage architecture for a new application that will store both structured data in a database and unstructured files. The application is expected to grow rapidly. The company wants to minimize operational overhead and ensure that data is encrypted at rest. Which approach should they choose?
Select an answer first
4application · medium
A company runs a stateful application on a single VM in a public cloud. The application writes critical data to the VM's local disk. The security team is concerned about data loss if the VM fails or is terminated. Which control should the company implement to mitigate this risk?
Select an answer first
5expert · hard
A company stores sensitive customer data in an object storage bucket. The data is encrypted with a customer-managed key. The security team discovers that the key was compromised. What is the most effective way to protect the data going forward?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.