What is a common cause of cloud misconfiguration that leads to security incidents?

Using strong encryption for data at rest

Regularly patching operating systems

Implementing multi-factor authentication

Leaving storage buckets publicly accessible

What is the purpose of tracking media throughout its lifecycle in a cloud environment?

To increase the storage capacity of the media

To reduce the cost of cloud storage

To ensure that data is properly sanitized before media is reused or disposed

To improve the performance of the storage system

Which of the following is a common system hardening practice?

Using weak passwords for simplicity

Installing all available software packages

Disabling unused ports and services

Which security tool monitors network traffic for suspicious patterns and can actively block malicious traffic?

Intrusion prevention system (IPS)

Intrusion detection system (IDS)

What is the core principle of immutable infrastructure?

Infrastructure is backed up daily

Once deployed, components are never modified; they are replaced with new versions

Infrastructure is monitored continuously

All infrastructure is stored in a read-only file system

Certified Cloud Security Professional

Domain 1Objective 3

Understand Security Concepts Relevant to Cloud Computing CCSP Practice Questions (Page 10)

Part of the Cloud Concepts, Architecture and Design domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

20concepts

17%of the exam

20 Concepts in This Objective

Cryptography fundamentals
Key management in the cloud
Identity and access management (IAM)
Privileged access management
Service and workload access
Data sanitization methods
Media lifecycle management
Network security controls
Traffic inspection and monitoring
Geofencing and geographic restrictions
Hypervisor security
Container security
Ephemeral computing and serverless security
Virtualization isolation
Common cloud threats
Threat modeling and risk assessment
Patching and vulnerability management
Baselining and configuration management
Immutable architecture
System hardening

Questions 46–50

46foundation · easy
What is a common cause of cloud misconfiguration that leads to security incidents?
Select an answer first
47foundation · easy
What is the purpose of tracking media throughout its lifecycle in a cloud environment?
Select an answer first
48foundation · easy
Which of the following is a common system hardening practice?
Select an answer first
49foundation · easy
Which security tool monitors network traffic for suspicious patterns and can actively block malicious traffic?
Select an answer first
50foundation · easy
What is the core principle of immutable infrastructure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.