CCSP Cloud Concepts, Architecture, and Design Practice Test 4 — 15 Questions

Question 1

Which cloud service model provides the customer with the most control over the underlying infrastructure, including operating systems and applications?

Accepted Answer

IaaS. IaaS provides virtualized computing resources where the customer manages OS, middleware, and applications, while the provider manages the physical infrastructure.

Answer

PaaS

Answer

SaaS

Answer

FaaS

Question 2

A financial services company is required to keep customer data within a specific geographic boundary due to regulatory requirements. The company is evaluating cloud deployment models. Which model would best ensure data sovereignty while still providing scalability?

Accepted Answer

Community cloud hosted in the required geography. A community cloud can be shared by organizations with common compliance needs, such as financial regulations, and can be deployed in a specific region to meet data sovereignty.

Answer

Hybrid cloud with public cloud bursting

Answer

Public cloud with multi-region deployment

Answer

Private cloud on-premises

Question 3

A cloud provider's SLA guarantees 99.95% uptime for a service. Over a one-year period (365 days), what is the maximum allowed downtime in minutes to meet this SLA?

Accepted Answer

262.8 minutes. 99.95% uptime means 0.05% downtime. 365 days * 24 hours * 60 minutes = 525,600 minutes. 0.05% of 525,600 = 262.8 minutes.

Answer

525.6 minutes

Answer

87.6 minutes

Answer

438 minutes

Question 4

Which characteristic of cloud computing allows a user to provision resources automatically without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. On-demand self-service enables users to provision and manage resources as needed via a web portal or API without manual provider intervention.

Answer

Rapid elasticity

Answer

Broad network access

Answer

Resource pooling

Question 5

An organization is moving a legacy application to the cloud and wants to minimize changes to the application code. They require full control over the operating system and middleware. Which cloud service model is most appropriate?

Accepted Answer

IaaS. IaaS provides virtual machines where the customer can install and configure the OS and middleware without modifying the application code.

Answer

PaaS

Answer

SaaS

Answer

FaaS

Question 6

A cloud customer is reviewing a provider's SOC 2 Type II report. What does this report primarily attest to?

Accepted Answer

The design and operating effectiveness of controls over a period. SOC 2 Type II reports evaluate the effectiveness of controls related to security, availability, processing integrity, confidentiality, and privacy over a period of time (typically 6-12 months).

Answer

The provider's financial controls and accuracy of billing

Answer

Compliance with international data protection regulations like GDPR

Answer

Penetration test results and vulnerability assessments

Question 7

Which design principle is most directly aimed at avoiding vendor lock-in and ensuring that workloads can be moved between cloud providers with minimal effort?

Accepted Answer

Portability. Portability ensures that applications and data can be moved across environments using open standards and APIs, reducing dependence on a single provider.

Answer

Reversibility

Answer

Elasticity

Answer

Multitenancy isolation

Question 8

In the NIST SP 800-145 definition, which deployment model is described as infrastructure provisioned for exclusive use by a single organization comprising multiple consumers?

Accepted Answer

Private cloud. NIST SP 800-145 defines private cloud as provisioned for exclusive use by a single organization with multiple consumers (e.g., business units).

Answer

Public cloud

Answer

Community cloud

Answer

Hybrid cloud

Question 9

A company uses a hybrid cloud model where sensitive data resides in a private cloud, while compute-intensive analytics run in a public cloud using anonymized data. What is the primary security consideration for this architecture?

Accepted Answer

Maintaining consistent security policies and secure connectivity between environments. In hybrid cloud, consistent security policies must apply across both environments, and secure connectivity (e.g., VPN or dedicated connection) is essential to protect data in transit and prevent leakage.

Answer

Using the same hypervisor in both clouds

Answer

Implementing network segmentation only in the public cloud

Answer

Ensuring the public cloud provider has SOC 2 certification

Question 10

An organization wants to ensure that if they decide to migrate away from their current cloud provider, they can retrieve all data in a usable format and delete it from the provider's systems. Which principle does this best describe?

Accepted Answer

Reversibility. Reversibility is the ability to cleanly exit a cloud service, including data portability and secure deletion of data from the provider's environment.

Answer

Interoperability

Answer

Portability

Answer

Elasticity

Question 11

In the shared responsibility model for public cloud IaaS, which of the following is typically the responsibility of the cloud customer?

Accepted Answer

Managing virtual machine guest OS patches. In IaaS, the customer manages the guest OS, applications, data, and network traffic controls. The provider manages the physical infrastructure, hypervisor, and network.

Answer

Network infrastructure redundancy

Answer

Physical security of data centers

Answer

Patching the hypervisor

Question 12

Which cloud characteristic refers to the ability to automatically scale resources up or down based on demand?

Accepted Answer

Rapid elasticity. Rapid elasticity allows resources to be provisioned and released automatically in response to demand, giving the appearance of unlimited capacity.

Answer

Resource pooling

Answer

Broad network access

Answer

Measured service

Question 13

A cloud architect is designing a multi-tenant SaaS application. Which TWO design principles are critical for ensuring tenant isolation? (Select TWO.)

Accepted Answer

Network isolation between tenants. Multitenancy isolation requires strong network isolation (e.g., virtual networks, security groups) and data isolation (e.g., separate databases or encryption per tenant) to prevent one tenant from accessing another's data.

Answer

Single shared database for all tenants

Answer

Using the same OS image for all tenants

Answer

Resource pooling across tenants

Question 14

A company is evaluating cloud providers for a global application. They need to ensure high availability and low latency. Which THREE factors are most important to consider during provider evaluation? (Select THREE.)

Accepted Answer

Availability of third-party audit reports (e.g., SOC 2, ISO 27001). SLA guarantees (e.g., 99.99%) affect availability; global data center presence reduces latency; audit reports like SOC 2 demonstrate operational effectiveness, which impacts reliability.

Answer

Provider's stock price performance

Answer

Number of employees at the provider

Question 15

An organization is adopting a hybrid cloud strategy. Which THREE considerations are vital for maintaining consistent security across environments? (Select THREE.)

Accepted Answer

Unified identity and access management (IAM). Consistent identity and access management (IAM) ensures uniform access controls; network segmentation policies prevent unauthorized movement; encryption standards protect data across environments. Patch management is important but not unique to hybrid cloud consistency.

Answer

Dedicated security team for each environment

Answer

Different encryption standards for public and private clouds