A cloud security engineer is configuring a site-to-site VPN between an on-premises network and a cloud virtual network. Which combination of controls is essential to protect data in transit and ensure network integrity?

DNSSEC to secure domain resolution and a firewall rule for the tunnel

IPsec encryption and a pre-shared key or certificate for authentication

A VLAN tag and a network security group applied to the tunnel

TLS encryption and a digital certificate for the VPN gateway

Which statement best describes the purpose of an OS hardening baseline in a cloud environment?

A list of approved software vendors that an organization permits for installing operating system updates and patches.

A backup and recovery procedure that ensures operating system configurations can be restored after a security incident.

A documented set of configuration standards applied to operating systems to reduce their attack surface and enforce consistent security settings.

A network segmentation plan that isolates operating system management interfaces from user-facing traffic.

Which of the following is a common technique used to maintain guest OS availability during planned host maintenance in a cloud environment?

Taking a snapshot of the guest OS before maintenance

Increasing the guest OS's allocated memory

Live migration of the guest VM to another host

Applying a security patch to the guest OS

Certified Cloud Security Professional

Domain 5Objective 2

Operate and Maintain Physical and Logical Infrastructure for Cloud Environment CCSP Practice Questions (Page 3)

Part of the Cloud Security Operations domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

11concepts

17%of the exam

Questions 11–15

11foundation · medium
A cloud security engineer is configuring a site-to-site VPN between an on-premises network and a cloud virtual network. Which combination of controls is essential to protect data in transit and ensure network integrity?
Select an answer first
12foundation · easy
Which backup strategy is most appropriate for a cloud workload that requires the ability to restore data to a specific point in time, such as just before a recent accidental deletion?
Select an answer first
13foundation · easy
Which statement best describes the purpose of an OS hardening baseline in a cloud environment?
Select an answer first
14foundation · easy
Which of the following is a common technique used to maintain guest OS availability during planned host maintenance in a cloud environment?
Select an answer first
15foundation · easy
Which of the following is an example of a hardware monitoring metric that would be collected from physical servers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Operate and Maintain Physical and Logical Infrastructure for Cloud Environment CCSP Practice Questions (Page 3)

Questions 11–15

A cloud security engineer is configuring a site-to-site VPN between an on-premises network and a cloud virtual network. Which combination of controls is essential to protect data in transit and ensure network integrity?

Which backup strategy is most appropriate for a cloud workload that requires the ability to restore data to a specific point in time, such as just before a recent accidental deletion?

Which statement best describes the purpose of an OS hardening baseline in a cloud environment?

Which of the following is a common technique used to maintain guest OS availability during planned host maintenance in a cloud environment?

Which of the following is an example of a hardware monitoring metric that would be collected from physical servers?

Keep studying — Cloud Security Operations