CCSP Cloud Concepts, Architecture, and Design Practice Test 5 — 15 Questions

Question 1

Which cloud service model allows customers to manage only their data and user access, while the provider manages everything else including the infrastructure, operating system, and applications?

Accepted Answer

SaaS. SaaS (Software as a Service) provides a complete application managed by the provider, with the customer responsible only for data and access control.

Answer

IaaS

Answer

CaaS

Answer

PaaS

Question 2

A financial institution requires a cloud environment that is shared by multiple organizations with common regulatory compliance needs, such as PCI DSS. Which deployment model is most appropriate?

Accepted Answer

Community cloud. A community cloud is designed for organizations with shared concerns like compliance, security, or policy, and is more suitable than public or private cloud for this specific requirement.

Answer

Private cloud

Answer

Public cloud

Answer

Hybrid cloud

Question 3

An organization is evaluating cloud service providers and notices that one provider's SLA offers 99.99% availability for a specific service, while another offers 99.9%. If the service costs $100,000 per month, what is the maximum allowable downtime per month for the 99.99% SLA?

Accepted Answer

4.32 minutes. 99.99% availability allows 0.01% downtime. Monthly downtime = 30 days * 24 hours * 60 minutes = 43,200 minutes. 0.01% of 43,200 = 4.32 minutes.

Answer

8.64 minutes

Answer

43.2 minutes

Answer

2.16 minutes

Question 4

Which characteristic of cloud computing allows a user to automatically provision computing resources without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. On-demand self-service is one of the essential characteristics defined by NIST, enabling users to provision resources automatically.

Answer

Rapid elasticity

Answer

Broad network access

Answer

Resource pooling

Question 5

A company wants to migrate a legacy application to the cloud with minimal re-architecture. They need control over the operating system and middleware but do not want to manage physical hardware. Which service model is most suitable?

Accepted Answer

IaaS. IaaS provides virtualized computing resources where the customer manages OS, apps, and data, but not the underlying infrastructure.

Answer

FaaS

Answer

SaaS

Answer

PaaS

Question 6

Which cloud design principle is most directly related to ensuring that an organization can migrate workloads from one cloud provider to another without significant re-engineering?

Accepted Answer

Portability. Portability refers to the ability to move workloads and data between cloud environments with minimal friction, often using open standards.

Answer

Reversibility

Answer

Multi-tenancy isolation

Answer

Elasticity

Question 7

In a hybrid cloud deployment, which of the following is a critical security consideration?

Accepted Answer

Ensuring consistent security policy across environments. Hybrid cloud requires consistent security policies across both public and private environments, typically enforced via secure connectivity and unified management.

Answer

Using only public cloud for sensitive data

Answer

Avoiding any use of APIs for integration

Answer

Eliminating all private cloud resources

Question 8

An organization is using a public cloud IaaS and wants to ensure they understand which security responsibilities fall on them. According to the shared responsibility model, which of the following is the customer responsible for in an IaaS deployment?

Accepted Answer

Security of the guest operating system. In IaaS, the customer is responsible for securing the operating system, applications, and data, while the provider secures the physical infrastructure.

Answer

Hypervisor security

Answer

Physical security of data centers

Answer

Network infrastructure hardening

Question 9

Which cloud design principle ensures that resources can be dynamically adjusted to meet changing demand, often using auto-scaling groups?

Accepted Answer

Elasticity. Rapid elasticity is the ability to scale resources up or down quickly and automatically in response to demand.

Answer

Resource pooling

Answer

Resiliency

Answer

Measured service

Question 10

A cloud provider offers a service with an SLA of 99.999% availability. What is the maximum allowable downtime per year in minutes? (Assume 365 days)

Accepted Answer

5.26 minutes. 99.999% availability means 0.001% downtime per year. Yearly minutes = 365 * 24 * 60 = 525,600. 0.001% of 525,600 = 5.256 minutes.

Answer

8.76 minutes

Answer

0.526 minutes

Answer

52.6 minutes

Question 11

Which of the following is an example of a cloud interoperability standard that facilitates portability of containerized applications across different cloud environments?

Accepted Answer

Kubernetes. Kubernetes is an open-source container orchestration platform that enables portability of containerized applications across different cloud providers and on-premises environments.

Answer

SOC 2 Type II

Answer

CSA STAR

Answer

ISO 27001

Question 12

Which NIST essential characteristic of cloud computing allows the provider to dynamically assign and reassign resources to multiple tenants, often using a multi-tenant model?

Accepted Answer

Resource pooling. Resource pooling is the characteristic where the provider's computing resources are pooled to serve multiple consumers, with physical and virtual resources dynamically assigned.

Answer

Rapid elasticity

Answer

Broad network access

Answer

Measured service

Question 13

A company is considering migrating its customer relationship management (CRM) system to a SaaS provider. Which TWO of the following security responsibilities typically remain with the customer in a SaaS deployment?

Accepted Answer

User access management. In SaaS, the customer is responsible for data classification and access control, as well as user access management, while the provider manages the application, OS, and infrastructure.

Answer

Physical security of data centers

Answer

Operating system patching

Answer

Application vulnerability management

Question 14

An organization is evaluating cloud service providers and wants to ensure that the provider can demonstrate independent verification of its security controls. Which THREE of the following are recognized cloud security audit reports or certifications?

Accepted Answer

ISO 27001. SOC 2 Type II, ISO 27001, and CSA STAR are well-known cloud security certifications/audit reports. FedRAMP is US government specific, and PCI DSS is for payment card industry, not a general cloud security audit.

Answer

PCI DSS

Answer

FedRAMP

Question 15

A cloud architect is designing a multi-tenant SaaS application. Which THREE of the following are essential isolation mechanisms that must be implemented to ensure tenant separation?

Accepted Answer

Data storage isolation (e.g., separate schemas or encryption per tenant). Multi-tenancy isolation requires separation at the hypervisor, data storage, and network levels to prevent one tenant from accessing another's resources.

Answer

Shared database for all tenants

Answer

Single sign-on (SSO) for all tenants