A multinational corporation is evaluating cloud providers for a new HR system that will store employee data for employees in the EU and the US. The company must comply with GDPR for EU data and has a requirement for data residency in the EU. Which criteria should be prioritized in the evaluation?

Performance benchmarks for compute

Number of data centers worldwide

Data residency options and GDPR compliance certifications

What is the purpose of a Statement of Applicability (SoA) in the context of certification?

To provide a marketing overview of the organization's services

To list the organization's customers and partners

To document which controls are applicable and how they are implemented

To certify that the organization has no security weaknesses

What does the Common Criteria (CC) framework provide for evaluating cloud products?

A standardized methodology for evaluating security functional and assurance requirements

A certification that guarantees the product is free from vulnerabilities

A performance benchmark for cloud computing speed

A set of mandatory security controls that all cloud products must implement

In a cloud environment, FIPS 140-2 validation is important for which component?

Cryptographic modules used for encryption and key management

Virtual machines running application workloads

Data storage drives in the cloud data center

Network firewalls and intrusion detection systems

Certified Cloud Security Professional

Domain 1Objective 5

Evaluate Cloud Service Providers (CSP) CCSP Practice Questions (Page 1)

Part of the Cloud Concepts, Architecture and Design domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

17%of the exam

Questions 1–5

1application · medium
A U.S. federal agency is evaluating a cloud provider for hosting a system that will process controlled unclassified information (CUI). The agency requires a certification that specifically addresses the security requirements for federal information systems. Which certification is most relevant for this requirement?
Select an answer first
2application · medium
A multinational corporation is evaluating cloud providers for a new HR system that will store employee data for employees in the EU and the US. The company must comply with GDPR for EU data and has a requirement for data residency in the EU. Which criteria should be prioritized in the evaluation?
Select an answer first
3foundation · easy
What is the purpose of a Statement of Applicability (SoA) in the context of certification?
Select an answer first
4foundation · easy
What does the Common Criteria (CC) framework provide for evaluating cloud products?
Select an answer first
5foundation · easy
In a cloud environment, FIPS 140-2 validation is important for which component?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.