CCSP Cloud Concepts, Architecture, and Design Practice Test 2 — 15 Questions

Question 1

A company is considering moving its customer relationship management (CRM) system to the cloud. The CRM is accessed through a web browser and the provider handles all maintenance, security, and infrastructure. Which cloud service model is being used?

Accepted Answer

SaaS. In SaaS, the provider manages everything except user access and data.

Answer

IaaS

Answer

FaaS

Answer

PaaS

Question 2

Which cloud characteristic allows a user to automatically provision computing resources without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. On-demand self-service enables automatic provisioning.

Answer

Broad network access

Answer

Rapid elasticity

Answer

Resource pooling

Question 3

An organization wants to deploy a cloud environment where multiple separate agencies with common compliance requirements share the infrastructure, but each agency retains some control over their own resources. Which deployment model best fits this scenario?

Accepted Answer

Community cloud. Community cloud is designed for organizations with shared concerns.

Answer

Hybrid cloud

Answer

Public cloud

Answer

Private cloud

Question 4

In a public cloud IaaS model, which of the following security controls is the cloud customer primarily responsible for implementing?

Accepted Answer

Guest OS patch management. The customer is responsible for securing the guest OS and applications.

Answer

Hypervisor security

Answer

Network infrastructure security

Answer

Physical security of data centers

Question 5

A cloud provider guarantees 99.99% availability for a service. What is the maximum allowed downtime per year (rounded to nearest minute)?

Accepted Answer

52.56 minutes. 99.99% implies 0.01% downtime. 365*24*60 = 525,600 minutes. 0.01% of 525,600 = 52.56 minutes, about 53 minutes.

Answer

1.01 hours

Answer

5.26 minutes

Answer

8.76 hours

Question 6

A company is designing a multi-cloud strategy to avoid vendor lock-in and ensure portability. They are considering using containers and an open-source orchestration platform. Which of the following is the BEST choice to achieve workload portability across different cloud providers?

Accepted Answer

Kubernetes. Kubernetes is an open-source container orchestration platform that allows portability across clouds.

Answer

Azure Functions

Answer

AWS Lambda

Answer

VMware vSphere

Question 7

An organization needs to migrate a legacy application to the cloud. The application requires full control over the operating system, middleware, and runtime. The team wants to minimize management overhead while retaining OS-level access. Which cloud service model is most appropriate?

Accepted Answer

IaaS. IaaS provides virtualized hardware with OS access; PaaS abstracts the OS.

Answer

SaaS

Answer

FaaS

Answer

PaaS

Question 8

Which of the following is a key benefit of using a hybrid cloud deployment model?

Accepted Answer

Ability to keep sensitive data on-premises while leveraging public cloud for less sensitive workloads. Hybrid cloud allows workloads to move between environments, providing flexibility and optimization.

Answer

Complete isolation from public networks

Answer

Single vendor management

Answer

Elimination of shared responsibility

Question 9

Which NIST-defined cloud characteristic ensures that resources can be scaled up and down rapidly based on demand?

Accepted Answer

Rapid elasticity. Rapid elasticity is the ability to scale quickly.

Answer

Broad network access

Answer

Measured service

Answer

Resource pooling

Question 10

A cloud security architect is evaluating a CSP for a financial services client. Which of the following audit reports would provide the most comprehensive assurance regarding the CSP's controls over security, availability, processing integrity, confidentiality, and privacy?

Accepted Answer

SOC 2 Type II. SOC 2 Type II reports on controls over security, availability, processing integrity, confidentiality, and privacy over a period.

Answer

PCI DSS Attestation of Compliance

Answer

SOC 1 Type II

Answer

ISO 27001 certification

Question 11

Which design principle is MOST directly concerned with the ability to move workloads between cloud providers or back on-premises without significant re-architecture?

Accepted Answer

Portability. Portability focuses on minimizing vendor lock-in and enabling migration.

Answer

Reversibility

Answer

Isolation

Answer

Elasticity

Question 12

A company plans to deploy a multi-tier application across multiple cloud providers to avoid single points of failure. They need to ensure consistent security policies, including identity federation and network segmentation, across all environments. Which architecture consideration is MOST critical?

Accepted Answer

Implementing a unified security policy management tool. Consistent security policy across environments is critical in hybrid/multi-cloud.

Answer

Using a single cloud provider for all tiers

Answer

Storing all data in a single provider's data center

Answer

Using different encryption standards for each provider

Question 13

A cloud architect is designing a multi-tenant SaaS application. Which TWO isolation mechanisms are essential to prevent tenant data leakage? (Choose two.)

Accepted Answer

Network isolation (e.g., VLANs, VPCs). Logical data isolation and network isolation are key to prevent data leakage.

Answer

Geographic isolation

Answer

Shared storage volume encryption

Answer

Hypervisor isolation

Question 14

An organization is evaluating a cloud service provider and reviewing their SLA. Which THREE metrics are most important for assessing the provider's reliability and accountability? (Choose three.)

Accepted Answer

Frequency of performance reporting. Uptime guarantee, compensation for failures, and reporting frequency are key SLA metrics.

Answer

Number of data center employees

Answer

Provider's stock price

Question 15

A company is adopting a hybrid cloud strategy. Which TWO security considerations are most critical for maintaining a consistent security posture across environments? (Choose two.)

Accepted Answer

Establishing consistent network security policies (e.g., firewall rules). Identity federation and consistent network security policies ensure seamless and secure integration.

Answer

Relying solely on perimeter security

Answer

Deploying separate security teams for each environment

Answer

Using different encryption keys for each environment