Which characteristic is unique to ephemeral storage compared to persistent volume storage in a cloud environment?

Data is automatically replicated across multiple availability zones

Data can be accessed by multiple virtual machines simultaneously

Data persists independently of the compute instance lifecycle

Data is lost when the associated virtual machine is terminated

A research organization needs to store temporary intermediate results from a high-performance computing (HPC) job. The data is only needed for the duration of the job and can be regenerated. The organization wants to minimize cost and maximize performance. Which storage type should they use?

Ephemeral storage attached to the compute nodes

Object storage with a lifecycle policy to delete after 30 days

Network block storage with snapshots

File storage with a replication rule

A company stores sensitive data in an object storage bucket. The security team wants to detect and respond to unauthorized access attempts. They enable logging and configure alerts. However, they notice that the logs are not capturing all access events. What is the most likely cause?

The logging is configured only for data events, not management events

The alerts are configured to only trigger on high-severity events

The logs are stored in the same bucket as the data

The bucket is encrypted, so logs are not generated

A company uses object storage for a data lake. The data is accessed by multiple analytics jobs that run at different times. The security team is concerned about the risk of a compromised analytics job accessing sensitive data. They want to implement the principle of least privilege while maintaining the ability to audit access. Which approach should they take?

Store the data in a separate bucket for each job

Use a single IAM role for all analytics jobs with broad read access to the data lake

Encrypt the data lake with a customer-managed key

Use separate IAM roles for each analytics job, each with permissions limited to the specific data it needs, and enable detailed logging

Certified Cloud Security Professional

Domain 2Objective 2

Design and Implement Cloud Data Storage Architectures CCSP Practice Questions (Page 2)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

2concepts

20%of the exam

Questions 6–10

6foundation · easy
Which characteristic is unique to ephemeral storage compared to persistent volume storage in a cloud environment?
Select an answer first
7application · medium
A research organization needs to store temporary intermediate results from a high-performance computing (HPC) job. The data is only needed for the duration of the job and can be regenerated. The organization wants to minimize cost and maximize performance. Which storage type should they use?
Select an answer first
8expert · hard
A company stores sensitive data in an object storage bucket. The security team wants to detect and respond to unauthorized access attempts. They enable logging and configure alerts. However, they notice that the logs are not capturing all access events. What is the most likely cause?
Select an answer first
9application · medium
A company needs to store a large amount of data that is accessed very rarely, but when accessed, retrieval can take up to 12 hours. The data must be retained for 10 years for legal reasons. The company wants to minimize storage cost. Which storage tier should they use?
Select an answer first
10expert · hard
A company uses object storage for a data lake. The data is accessed by multiple analytics jobs that run at different times. The security team is concerned about the risk of a compromised analytics job accessing sensitive data. They want to implement the principle of least privilege while maintaining the ability to audit access. Which approach should they take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Design and Implement Cloud Data Storage Architectures CCSP Practice Questions (Page 2)

Questions 6–10

Which characteristic is unique to ephemeral storage compared to persistent volume storage in a cloud environment?

A research organization needs to store temporary intermediate results from a high-performance computing (HPC) job. The data is only needed for the duration of the job and can be regenerated. The organization wants to minimize cost and maximize performance. Which storage type should they use?

A company stores sensitive data in an object storage bucket. The security team wants to detect and respond to unauthorized access attempts. They enable logging and configure alerts. However, they notice that the logs are not capturing all access events. What is the most likely cause?

A company needs to store a large amount of data that is accessed very rarely, but when accessed, retrieval can take up to 12 hours. The data must be retained for 10 years for legal reasons. The company wants to minimize storage cost. Which storage tier should they use?

Keep studying — Cloud Data Security