A company is deploying a multi-tier application in a public cloud. They need to ensure that the database tier is not accessible from the internet, but the web tier must be publicly reachable. They also want to control traffic between the tiers. Which configuration is most appropriate?

Use a single subnet and rely on host-based firewalls on each VM

Place the database in a different VPC and peer the VPCs

Use a VPC with separate subnets for web and database, and configure security groups to allow only the web tier to access the database

Place both tiers in the same subnet with a network ACL allowing all traffic

What is the primary purpose of data archiving in a cloud environment?

To replicate data across multiple regions for high availability

To provide immediate recovery of deleted files

To store data that is rarely accessed but must be retained for compliance or historical purposes

A company is planning to run multiple virtual machines in a cloud environment. They want to ensure that a vulnerability in one VM cannot compromise other VMs on the same physical host. Which technology is most important for this isolation?

Identity and Access Management (IAM)

Network access control lists (ACLs)

In a virtualized environment, what does a virtual machine (VM) represent?

A software-based emulation of a computer that runs an operating system and applications

A physical server that is dedicated to a single customer

A storage volume that can be attached to a physical server

A container that shares the host operating system kernel

A global company is subject to the EU General Data Protection Regulation (GDPR) and needs to store personal data of EU citizens. They are considering a public cloud provider with data centers in the EU and the US. The provider offers data residency options. The company also needs to ensure they can respond to data subject access requests (DSARs) within the required timeframe. Which approach best addresses both legal and operational requirements?

Use a private cloud on-premises to avoid GDPR entirely

Store data in the US region and rely on the provider's privacy shield certification

Store all EU personal data in an EU region and ensure the contract includes data processing agreements and DSAR support

Use a community cloud shared with other EU companies

Systems Security Certified Practitioner

Domain 7Objective 4

7.4 - Understand and Configure Cloud Security SSCP Practice Questions (Page 3)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

15%of the exam

Questions 11–15

11application · medium
A company is deploying a multi-tier application in a public cloud. They need to ensure that the database tier is not accessible from the internet, but the web tier must be publicly reachable. They also want to control traffic between the tiers. Which configuration is most appropriate?
Select an answer first
12foundation · easy
What is the primary purpose of data archiving in a cloud environment?
Select an answer first
13application · medium
A company is planning to run multiple virtual machines in a cloud environment. They want to ensure that a vulnerability in one VM cannot compromise other VMs on the same physical host. Which technology is most important for this isolation?
Select an answer first
14foundation · easy
In a virtualized environment, what does a virtual machine (VM) represent?
Select an answer first
15expert · hard
A global company is subject to the EU General Data Protection Regulation (GDPR) and needs to store personal data of EU citizens. They are considering a public cloud provider with data centers in the EU and the US. The provider offers data residency options. The company also needs to ensure they can respond to data subject access requests (DSARs) within the required timeframe. Which approach best addresses both legal and operational requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.