CCSP Practice Test 14 — 15 Questions

Question 1

A cloud customer is reviewing a provider's SOC 2 Type II report. What does this report primarily attest to?

Accepted Answer

The design and operating effectiveness of controls over a period. SOC 2 Type II reports evaluate the effectiveness of controls related to security, availability, processing integrity, confidentiality, and privacy over a period of time (typically 6-12 months).

Answer

The provider's financial controls and accuracy of billing

Answer

Compliance with international data protection regulations like GDPR

Answer

Penetration test results and vulnerability assessments

Question 2

Which NIST-defined cloud characteristic ensures that resources can be scaled up and down rapidly based on demand?

Accepted Answer

Rapid elasticity. Rapid elasticity is the ability to scale quickly.

Answer

Broad network access

Answer

Measured service

Answer

Resource pooling

Question 3

Which characteristic of cloud computing allows a user to automatically provision computing resources without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. On-demand self-service is one of the essential characteristics defined by NIST, enabling users to provision resources automatically.

Answer

Rapid elasticity

Answer

Broad network access

Answer

Resource pooling

Question 4

Which cloud characteristic allows a consumer to automatically provision computing resources, such as server time and storage, as needed without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. On-demand self-service enables automatic provisioning. Broad network access is about network availability, resource pooling is about multi-tenancy, rapid elasticity is about scaling.

Answer

Rapid elasticity

Answer

Broad network access

Answer

Resource pooling

Question 5

A cloud architect is designing a multi-tenant SaaS application. Which THREE of the following are essential isolation mechanisms that must be implemented to ensure tenant separation?

Accepted Answer

Data storage isolation (e.g., separate schemas or encryption per tenant). Multi-tenancy isolation requires separation at the hypervisor, data storage, and network levels to prevent one tenant from accessing another's resources.

Answer

Shared database for all tenants

Answer

Single sign-on (SSO) for all tenants

Question 6

A company is considering migrating its customer relationship management (CRM) system to a SaaS provider. Which TWO of the following security responsibilities typically remain with the customer in a SaaS deployment?

Accepted Answer

User access management. In SaaS, the customer is responsible for data classification and access control, as well as user access management, while the provider manages the application, OS, and infrastructure.

Answer

Physical security of data centers

Answer

Operating system patching

Answer

Application vulnerability management

Question 7

A cloud provider's SLA guarantees 99.95% uptime for a service. Over a one-year period (365 days), what is the maximum allowed downtime in minutes to meet this SLA?

Accepted Answer

262.8 minutes. 99.95% uptime means 0.05% downtime. 365 days * 24 hours * 60 minutes = 525,600 minutes. 0.05% of 525,600 = 262.8 minutes.

Answer

525.6 minutes

Answer

87.6 minutes

Answer

438 minutes

Question 8

Which cloud design principle is most directly related to ensuring that an organization can migrate workloads from one cloud provider to another without significant re-engineering?

Accepted Answer

Portability. Portability refers to the ability to move workloads and data between cloud environments with minimal friction, often using open standards.

Answer

Reversibility

Answer

Multi-tenancy isolation

Answer

Elasticity

Question 9

Which cloud service model provides the consumer with the ability to deploy and run custom applications using the provider's programming languages, libraries, and tools, but does not allow management of the underlying infrastructure?

Accepted Answer

PaaS. PaaS provides a platform for customers to develop and run applications without managing the underlying infrastructure. IaaS provides infrastructure, SaaS provides software.

Answer

SaaS

Answer

IaaS

Answer

CaaS

Question 10

An organization is evaluating cloud service providers and notices that one provider's SLA offers 99.99% availability for a specific service, while another offers 99.9%. If the service costs $100,000 per month, what is the maximum allowable downtime per month for the 99.99% SLA?

Accepted Answer

4.32 minutes. 99.99% availability allows 0.01% downtime. Monthly downtime = 30 days * 24 hours * 60 minutes = 43,200 minutes. 0.01% of 43,200 = 4.32 minutes.

Answer

8.64 minutes

Answer

43.2 minutes

Answer

2.16 minutes

Question 11

A company is evaluating cloud providers for a global application. They need to ensure high availability and low latency. Which THREE factors are most important to consider during provider evaluation? (Select THREE.)

Accepted Answer

Availability of third-party audit reports (e.g., SOC 2, ISO 27001). SLA guarantees (e.g., 99.99%) affect availability; global data center presence reduces latency; audit reports like SOC 2 demonstrate operational effectiveness, which impacts reliability.

Answer

Provider's stock price performance

Answer

Number of employees at the provider

Question 12

A cloud security architect is designing a multi-tenant SaaS application that must ensure strong isolation between tenants. Which TWO mechanisms are most effective for achieving multitenancy isolation?

Accepted Answer

Hypervisor-based virtual machine isolation. Network micro-segmentation and hypervisor-level isolation are key for multi-tenant isolation. Encryption at rest protects data but does not isolate compute; database row-level permissions provide logical but not strong isolation; API rate limiting controls usage but not isolation.

Answer

Encryption at rest for all tenant data

Answer

Database row-level permissions

Answer

API rate limiting per tenant

Question 13

Which characteristic of cloud computing allows a user to provision computing resources automatically without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. On-demand self-service enables users to provision resources as needed without manual intervention from the provider. This is a fundamental characteristic defined by NIST.

Answer

Rapid elasticity

Answer

Broad network access

Answer

Measured service

Question 14

A security auditor is reviewing a cloud provider's controls to ensure that customer data is appropriately isolated. Which design principle is most directly related to this requirement?

Accepted Answer

Multitenancy isolation. Multitenancy isolation ensures that resources (compute, storage, network) of different customers are separated. Elasticity is about scaling, portability about moving, reversibility about exiting.

Answer

Reversibility

Answer

Portability

Answer

Elasticity

Question 15

Which NIST essential characteristic of cloud computing allows the provider to dynamically assign and reassign resources to multiple tenants, often using a multi-tenant model?

Accepted Answer

Resource pooling. Resource pooling is the characteristic where the provider's computing resources are pooled to serve multiple consumers, with physical and virtual resources dynamically assigned.

Answer

Rapid elasticity

Answer

Broad network access

Answer

Measured service