A cloud administrator needs to determine whether a database server is reaching its capacity limits. Which set of metrics would be most useful for this assessment?

Firewall rule count and VPN connection status

Number of user accounts and password policy settings

Patch version and antivirus definition date

CPU usage, memory usage, and disk I/O

A cloud security team is deploying a web application in a cloud environment. They need to protect the application from common web attacks while also ensuring that legitimate traffic is not blocked. Which network security control is most appropriate for this requirement?

A honeypot that mimics the application to attract attackers

A host-based firewall that restricts outbound traffic from the application server

A network intrusion detection system (IDS) that only logs suspicious traffic

A web application firewall (WAF) with a rule set tuned to the application

In a cloud environment, which practice is most directly associated with performance monitoring?

Configuring firewall rules to block malicious traffic

Collecting and analyzing metrics such as response time and throughput

Applying the latest security patches to all servers

Reviewing audit logs for unauthorized access attempts

Which of the following is an example of an operation that occurs on the management plane of a cloud service?

A web server processing an HTTP request from a client

An administrator updating the firewall rules for a virtual network

A database engine executing a SQL query for an application

A load balancer forwarding traffic to a healthy backend server

In a cloud environment, what is the primary purpose of implementing cluster availability?

To provide a single point of management for all virtual machines in the environment

To automatically scale the number of servers based on current workload demand

To encrypt all data stored within the cluster to prevent unauthorized access

To ensure that a group of servers work together to provide continuous service even if one server fails

Certified Cloud Security Professional

Domain 5Objective 2

Operate and Maintain Physical and Logical Infrastructure for Cloud Environment CCSP Practice Questions (Page 1)

Part of the Cloud Security Operations domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

11concepts

17%of the exam

Questions 1–5

1foundation · easy
A cloud administrator needs to determine whether a database server is reaching its capacity limits. Which set of metrics would be most useful for this assessment?
Select an answer first
2foundation · medium
A cloud security team is deploying a web application in a cloud environment. They need to protect the application from common web attacks while also ensuring that legitimate traffic is not blocked. Which network security control is most appropriate for this requirement?
Select an answer first
3foundation · easy
In a cloud environment, which practice is most directly associated with performance monitoring?
Select an answer first
4foundation · easy
Which of the following is an example of an operation that occurs on the management plane of a cloud service?
Select an answer first
5foundation · easy
In a cloud environment, what is the primary purpose of implementing cluster availability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.