An organization wants to use a cloud email and collaboration suite without managing the underlying servers, operating systems, or application code. Which cloud service model should they choose?

Infrastructure as a Service (IaaS)

A company is designing a disaster recovery plan using a cloud provider. They have a recovery time objective (RTO) of 2 hours and a recovery point objective (RPO) of 15 minutes. They are considering using a low-cost storage tier for backups, but that tier has a retrieval time of 4 hours. What is the most appropriate action?

Use the low-cost tier and rely on replication to another region

Use a higher-cost storage tier with faster retrieval to meet the RTO

Increase the RTO to 4 hours to match the storage tier

Use the low-cost tier and accept the longer retrieval time

A company is outsourcing its email and collaboration services to a cloud provider. The company wants to ensure that if they terminate the contract, they can retrieve all their data and have the provider delete their data from the provider's systems. Which contractual element is most important?

Service level agreement (SLA) for uptime

Audit rights for the provider's data centers

Data portability and destruction clauses

A company is planning to migrate its on-premises servers to a cloud environment. They want to maintain similar network segmentation and security controls as their current data center, including the ability to define subnets and control traffic flow between application tiers. Which cloud feature is essential to achieve this?

Identity and Access Management (IAM)

When outsourcing data processing to a cloud provider, what does 'data portability' refer to?

The ability to access data from any device

The process of backing up data to multiple regions

The ability to move data from one cloud provider to another without being locked in

The process of encrypting data during transmission

Systems Security Certified Practitioner

Domain 7Objective 4

7.4 - Understand and Configure Cloud Security SSCP Practice Questions (Page 4)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

15%of the exam

Questions 16–20

16foundation · easy
An organization wants to use a cloud email and collaboration suite without managing the underlying servers, operating systems, or application code. Which cloud service model should they choose?
Select an answer first
17expert · hard
A company is designing a disaster recovery plan using a cloud provider. They have a recovery time objective (RTO) of 2 hours and a recovery point objective (RPO) of 15 minutes. They are considering using a low-cost storage tier for backups, but that tier has a retrieval time of 4 hours. What is the most appropriate action?
Select an answer first
18application · medium
A company is outsourcing its email and collaboration services to a cloud provider. The company wants to ensure that if they terminate the contract, they can retrieve all their data and have the provider delete their data from the provider's systems. Which contractual element is most important?
Select an answer first
19application · medium
A company is planning to migrate its on-premises servers to a cloud environment. They want to maintain similar network segmentation and security controls as their current data center, including the ability to define subnets and control traffic flow between application tiers. Which cloud feature is essential to achieve this?
Select an answer first
20foundation · easy
When outsourcing data processing to a cloud provider, what does 'data portability' refer to?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

7.4 - Understand and Configure Cloud Security SSCP Practice Questions (Page 4)

Questions 16–20

An organization wants to use a cloud email and collaboration suite without managing the underlying servers, operating systems, or application code. Which cloud service model should they choose?

A company is outsourcing its email and collaboration services to a cloud provider. The company wants to ensure that if they terminate the contract, they can retrieve all their data and have the provider delete their data from the provider's systems. Which contractual element is most important?

When outsourcing data processing to a cloud provider, what does 'data portability' refer to?

Keep studying — Systems and Application Security