What is the primary purpose of a digital signature in cloud communications?

To compress the message for efficient transmission

To verify the sender's identity and ensure the message was not altered

To generate a shared secret key for symmetric encryption

To encrypt the entire message so only the intended recipient can read it

Which key management option allows a customer to supply and control their own encryption keys in a cloud environment, often using a hardware security module (HSM)?

Server-side encryption with cloud-managed keys

Client-side encryption with a passphrase

Envelope encryption with data keys

What is the primary security benefit of scanning container images before deployment?

To verify the image's digital signature

To identify and remediate vulnerabilities in the image's software packages

To compress the image for faster deployment

What is the primary purpose of threat modeling in cloud architecture?

To identify potential threats and vulnerabilities and prioritize mitigations

To monitor network traffic for attacks

To encrypt all data in the cloud

To patch vulnerabilities in cloud services

A cloud provider offers both VM-based and container-based services to multiple tenants. A security auditor is reviewing the isolation mechanisms. Which statement accurately describes the isolation differences between VMs and containers?

VMs and containers provide the same level of isolation because both use the host kernel.

Containers provide stronger isolation because they are lighter weight and have a smaller attack surface.

VMs provide stronger isolation because each VM has its own kernel, while containers share the host kernel.

Containers provide stronger isolation because they use a hypervisor to separate tenants.

Certified Cloud Security Professional

Domain 1Objective 3

Understand Security Concepts Relevant to Cloud Computing CCSP Practice Questions (Page 7)

Part of the Cloud Concepts, Architecture and Design domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

20concepts

17%of the exam

20 Concepts in This Objective

Cryptography fundamentals
Key management in the cloud
Identity and access management (IAM)
Privileged access management
Service and workload access
Data sanitization methods
Media lifecycle management
Network security controls
Traffic inspection and monitoring
Geofencing and geographic restrictions
Hypervisor security
Container security
Ephemeral computing and serverless security
Virtualization isolation
Common cloud threats
Threat modeling and risk assessment
Patching and vulnerability management
Baselining and configuration management
Immutable architecture
System hardening

Questions 31–35

31foundation · easy
What is the primary purpose of a digital signature in cloud communications?
Select an answer first
32foundation · easy
Which key management option allows a customer to supply and control their own encryption keys in a cloud environment, often using a hardware security module (HSM)?
Select an answer first
33foundation · easy
What is the primary security benefit of scanning container images before deployment?
Select an answer first
34foundation · easy
What is the primary purpose of threat modeling in cloud architecture?
Select an answer first
35application · medium
A cloud provider offers both VM-based and container-based services to multiple tenants. A security auditor is reviewing the isolation mechanisms. Which statement accurately describes the isolation differences between VMs and containers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.