What is the primary purpose of a Business Impact Analysis (BIA)?

To implement security controls after a breach

To select a cloud provider based on cost

To identify critical business functions and quantify the impact of disruptions

To design the technical architecture for cloud migration

In cloud BC/DR planning, what does RPO (Recovery Point Objective) define?

The maximum time allowed to restore systems after a disaster

The maximum acceptable amount of data loss measured in time

The minimum level of service required during a disruption

The cost of implementing a backup strategy

A development team is building a new microservices-based application in the cloud. The security architect wants to apply the SANS principle of defense in depth. The application will be internet-facing and will handle sensitive customer data. Which set of controls best demonstrates defense in depth?

A virtual private network (VPN) for all administrative access and a strong password policy.

A single strong password policy for all users and a firewall at the network perimeter.

Encryption of data at rest only, because the data is stored in a trusted cloud environment.

A web application firewall (WAF), network security groups, and encryption of data at rest and in transit.

A company is evaluating two cloud providers for a new application. The company requires that the application be portable so it can be migrated between providers if needed. The application uses a relational database. Which approach best ensures portability?

Using the provider's serverless database service and its native SDK for all data access.

Using a managed database service with a proprietary API from the chosen provider.

Using a NoSQL database with a provider-specific query language.

Using a standard SQL database with the application code written to use standard SQL queries.

Certified Cloud Security Professional

Domain 1Objective 4

Understand Design Principles of Secure Cloud Computing CCSP Practice Questions (Page 1)

Part of the Cloud Concepts, Architecture and Design domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

17%of the exam

10 Concepts in This Objective

Cloud Secure Data Lifecycle
Cloud Business Continuity and Disaster Recovery Planning
Business Impact Analysis (BIA)
Functional Security Requirements: Portability, Interoperability, Vendor Lock-in
Security Responsibilities in SaaS, IaaS, and PaaS
Cloud Design Patterns: SANS Security Principles
Cloud Design Patterns: Well-Architected Framework
Cloud Design Patterns: CSA Enterprise Architecture
Secure by Design Principles
DevOps Security (DevSecOps)

Questions 1–5

1foundation · easy
What is the primary purpose of a Business Impact Analysis (BIA)?
Select an answer first
2foundation · easy
In cloud BC/DR planning, what does RPO (Recovery Point Objective) define?
Select an answer first
3foundation · easy
Which Well-Architected Framework pillar focuses on the ability of a system to recover from failures and meet demand?
Select an answer first
4application · medium
A development team is building a new microservices-based application in the cloud. The security architect wants to apply the SANS principle of defense in depth. The application will be internet-facing and will handle sensitive customer data. Which set of controls best demonstrates defense in depth?
Select an answer first
5expert · hard
A company is evaluating two cloud providers for a new application. The company requires that the application be portable so it can be migrated between providers if needed. The application uses a relational database. Which approach best ensures portability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.