A company uses a cloud file storage service to share documents among employees. An employee accidentally deletes a critical folder. The company has a backup policy that runs nightly. What is the primary risk to data availability in this scenario?

The backup may be up to 24 hours old, so recent changes are lost

The backup service requires manual intervention to restore

The backup is encrypted and cannot be restored

The backup is stored in the same region as the primary data

A cloud architect needs to store infrequently accessed archival data that must be retained for several years and retrieved only occasionally. Which storage type is most appropriate for this use case?

Volume storage with a high-performance SSD tier

Raw block storage with snapshots taken monthly

Object storage with lifecycle policies to transition to cold tiers

Ephemeral storage attached to a virtual machine

A company stores backup data in an object storage bucket. The backup data is encrypted with a customer-managed key. The security team wants to ensure that the data is recoverable even if the key is accidentally deleted. What should they do?

Enable key rotation and store a backup of the key in a secure location

Disable encryption on the bucket

Use a service-managed key instead

Store the key in the same bucket as the backup data

A company is designing a disaster recovery plan for a critical application that uses block storage. The application has a recovery time objective (RTO) of 1 hour and a recovery point objective (RPO) of 15 minutes. The company has a limited budget and wants to minimize the cost of the DR solution. Which approach should they choose?

Replicate the block storage to a secondary region using synchronous replication and maintain a standby VM

Use asynchronous replication to a secondary region and rely on the primary region's backups

Take snapshots every 15 minutes and store them in a secondary region, with a script to restore and start a new VM

Store the data on ephemeral storage and rebuild from source code

What is a primary security risk when using ephemeral storage for sensitive data?

Data is automatically encrypted with a customer-managed key

Data is replicated across multiple regions without authorization

Data remains on the physical disk after the VM is deallocated

Data is accessible to other tenants on the same physical host

Certified Cloud Security Professional

Domain 2Objective 2

Design and Implement Cloud Data Storage Architectures CCSP Practice Questions (Page 3)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

2concepts

20%of the exam

Questions 11–15

11application · medium
A company uses a cloud file storage service to share documents among employees. An employee accidentally deletes a critical folder. The company has a backup policy that runs nightly. What is the primary risk to data availability in this scenario?
Select an answer first
12foundation · easy
A cloud architect needs to store infrequently accessed archival data that must be retained for several years and retrieved only occasionally. Which storage type is most appropriate for this use case?
Select an answer first
13application · medium
A company stores backup data in an object storage bucket. The backup data is encrypted with a customer-managed key. The security team wants to ensure that the data is recoverable even if the key is accidentally deleted. What should they do?
Select an answer first
14expert · hard
A company is designing a disaster recovery plan for a critical application that uses block storage. The application has a recovery time objective (RTO) of 1 hour and a recovery point objective (RPO) of 15 minutes. The company has a limited budget and wants to minimize the cost of the DR solution. Which approach should they choose?
Select an answer first
15foundation · easy
What is a primary security risk when using ephemeral storage for sensitive data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.