A company is using a cloud provider's VPC to host a multi-tier application. They have a web tier, an application tier, and a database tier. They need to ensure that the database tier is not accessible from the internet, but the web tier must be publicly accessible. They also need to control traffic between the tiers. Which configuration is most appropriate?

Place the web and application tiers in a public subnet and the database tier in a private subnet

Use a single subnet and rely on host-based firewalls on each VM

Place the web tier in a public subnet and the application and database tiers in a private subnet, with security groups controlling traffic

Place all tiers in the same subnet and use security groups to control traffic

In the shared responsibility model for IaaS, which of the following is typically the customer's responsibility?

Physical security of the data center

Network infrastructure maintenance

Patching the guest operating system

Which document formally defines the expected performance, availability, and support levels that a cloud provider must deliver?

Memorandum of Understanding (MOU)

Data Processing Agreement (DPA)

What is 'shadow IT' in the context of cloud computing?

The process of encrypting data before sending it to the cloud

The use of cloud services without the knowledge or approval of the organization's IT department

A legal requirement to disclose cloud usage to regulators

A type of cloud deployment model that uses multiple providers

Systems Security Certified Practitioner

Domain 7Objective 4

7.4 - Understand and Configure Cloud Security SSCP Practice Questions (Page 5)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

15%of the exam

Questions 21–25

21foundation · easy
A healthcare organization wants to use a cloud environment that is exclusively used by their organization, but they want to avoid the capital expenses of building and maintaining their own data center. Which cloud deployment model best fits this requirement?
Select an answer first
22expert · hard
A company is using a cloud provider's VPC to host a multi-tier application. They have a web tier, an application tier, and a database tier. They need to ensure that the database tier is not accessible from the internet, but the web tier must be publicly accessible. They also need to control traffic between the tiers. Which configuration is most appropriate?
Select an answer first
23foundation · easy
In the shared responsibility model for IaaS, which of the following is typically the customer's responsibility?
Select an answer first
24foundation · easy
Which document formally defines the expected performance, availability, and support levels that a cloud provider must deliver?
Select an answer first
25foundation · easy
What is 'shadow IT' in the context of cloud computing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

7.4 - Understand and Configure Cloud Security SSCP Practice Questions (Page 5)

Questions 21–25

A healthcare organization wants to use a cloud environment that is exclusively used by their organization, but they want to avoid the capital expenses of building and maintaining their own data center. Which cloud deployment model best fits this requirement?

In the shared responsibility model for IaaS, which of the following is typically the customer's responsibility?

Which document formally defines the expected performance, availability, and support levels that a cloud provider must deliver?

What is 'shadow IT' in the context of cloud computing?

Keep studying — Systems and Application Security