Which authentication method requires the user to provide two or more verification factors to gain access?

Multi-factor authentication (MFA)

Role-based access control (RBAC)

What is the purpose of a log retention policy in cloud auditing?

To define how long audit logs must be stored to meet compliance and investigation needs

To automatically delete logs that contain sensitive data

To generate real-time alerts on security incidents

Which technique is commonly used to correlate logs from different time zones and systems?

Encrypting all logs with the same key

Using a single log format for all sources

Normalizing timestamps to a standard time zone (e.g., UTC)

Deleting logs older than 30 days

What is the primary purpose of network segmentation in a cloud environment?

To increase the bandwidth available to each virtual machine

To provide a backup path for network connectivity

To encrypt all traffic within the cloud

To isolate workloads and limit the spread of an attack

Certified Cloud Security Professional

Domain 3Objective 4

Plan and Implementation of Security Controls CCSP Practice Questions (Page 1)

Part of the Cloud Platform and Infrastructure Security domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–4 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

9concepts

17%of the exam

9 Concepts in This Objective

Physical and environmental protection controls
System protection controls
Storage protection controls
Communication protection controls
Identification and authentication in cloud
Authorization and access control in cloud
Audit mechanisms and log collection
Log correlation and analysis
Packet capture and network monitoring

Questions 1–5

1foundation · easy
Which authentication method requires the user to provide two or more verification factors to gain access?
Select an answer first
2foundation · easy
Which protocol is commonly used to secure data in transit between a web browser and a cloud application?
Select an answer first
3foundation · easy
What is the purpose of a log retention policy in cloud auditing?
Select an answer first
4foundation · easy
Which technique is commonly used to correlate logs from different time zones and systems?
Select an answer first
5foundation · easy
What is the primary purpose of network segmentation in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.