A company has a hybrid cloud environment with a direct connection to the cloud provider. They want to ensure that all traffic between their on-premises network and the cloud is encrypted, and that only authenticated users can access the cloud resources. Which solution should they implement?

Implement network segmentation and use shared keys.

Use a remote access VPN for all users.

Set up an IPsec VPN over the direct connection.

Use the direct connection as-is and rely on the cloud provider's network security.

Which of the following is a common source of audit logs in a cloud environment?

Cloud service provider's API activity logs

Physical security guards' shift reports

Marketing campaign performance data

What is the primary benefit of using federated identity in a cloud environment?

It automatically assigns permissions to users

It provides a backup of user credentials

It allows users to access multiple cloud services using credentials from their organization's identity provider

It encrypts all data stored in the cloud

Certified Cloud Security Professional

Domain 3Objective 4

Plan and Implementation of Security Controls CCSP Practice Questions (Page 2)

Part of the Cloud Platform and Infrastructure Security domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–4 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

9concepts

17%of the exam

9 Concepts in This Objective

Physical and environmental protection controls
System protection controls
Storage protection controls
Communication protection controls
Identification and authentication in cloud
Authorization and access control in cloud
Audit mechanisms and log collection
Log correlation and analysis
Packet capture and network monitoring

Questions 6–10

6expert · hard
A company has a hybrid cloud environment with a direct connection to the cloud provider. They want to ensure that all traffic between their on-premises network and the cloud is encrypted, and that only authenticated users can access the cloud resources. Which solution should they implement?
Select an answer first
7foundation · easy
Which storage protection measure is used to protect data at rest in a cloud object storage service?
Select an answer first
8foundation · easy
Which process ensures that cloud-hosted systems receive security updates to address known vulnerabilities?
Select an answer first
9foundation · easy
Which of the following is a common source of audit logs in a cloud environment?
Select an answer first
10foundation · easy
What is the primary benefit of using federated identity in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Plan and Implementation of Security Controls CCSP Practice Questions (Page 2)

Questions 6–10

A company has a hybrid cloud environment with a direct connection to the cloud provider. They want to ensure that all traffic between their on-premises network and the cloud is encrypted, and that only authenticated users can access the cloud resources. Which solution should they implement?

Which storage protection measure is used to protect data at rest in a cloud object storage service?

Which process ensures that cloud-hosted systems receive security updates to address known vulnerabilities?

Which of the following is a common source of audit logs in a cloud environment?

What is the primary benefit of using federated identity in a cloud environment?

Keep studying — Cloud Platform and Infrastructure Security