Certified Cloud Security Professional
Domain 1Objective 5
Evaluate Cloud Service Providers (CSP) CCSP Practice Questions (Page 6)
Part of the Cloud Concepts, Architecture and Design domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)
34questions here
7free pages
8concepts
17%of the exam
Questions 26–30
- 26
When analyzing a certification report, what should you look for to determine if a CSP meets your compliance requirements?
Select an answer first - 27
A healthcare organization is evaluating a cloud provider to host its patient portal. The organization must comply with HIPAA and requires that the provider's data centers undergo independent verification of security controls. The provider offers an ISO 27001 certificate, a SOC 2 Type II report, and a self-assessment questionnaire. Which document should the organization primarily rely on to verify the provider's operational security controls over a period of time?
Select an answer first - 28
A government agency is evaluating a cloud-based access control system for a high-security facility. The agency requires a formal evaluation of the product's security functionality against a standardized set of criteria, with a focus on assurance that the product's security features are correctly implemented. Which certification framework is specifically designed to provide this type of evaluation?
Select an answer first - 29
A company is developing a set of criteria to evaluate cloud providers for a new customer relationship management (CRM) system. The system will store customer data, including payment card information. The company must comply with PCI DSS and has a requirement for high availability. Which criteria should be included in the evaluation? (Select all that apply.)
Select an answer first - 30
Which certification is commonly used to evaluate a cloud service provider's information security management system?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.