CCSP Cloud Concepts, Architecture, and Design Practice Question
A company is designing a multi-cloud strategy to avoid vendor lock-in and ensure portability. They are considering using containers and an open-source orchestration platform. Which of the following is the BEST choice to achieve workload portability across different cloud providers?
⚠ Common exam trap
The trap is picking a serverless service (Lambda, Azure Functions) as a portability solution, when proprietary FaaS platforms are the opposite of vendor-neutral and increase lock-in.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Kubernetes
Kubernetes is an open-source container orchestration platform that runs on any cloud or on-premises infrastructure, providing a consistent API and workload abstraction that makes containers portable across providers. Because it is not tied to a single vendor, workloads packaged as Kubernetes manifests or Helm charts can be moved between AWS EKS, Azure AKS, Google GKE, or self-managed clusters with minimal changes, directly addressing vendor lock-in and portability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Kubernetes
Why this is correct
Kubernetes is an open-source orchestration platform supported by every major provider, so containerised workloads run identically anywhere. This directly satisfies the stem's portability and anti-lock-in constraint, unlike proprietary orchestrators tied to a single vendor's APIs.
- ✗
Azure Functions
Why it's wrong here
Azure Functions is a proprietary serverless runtime, so functions depend on Azure-specific triggers and bindings and cannot run unchanged elsewhere. It suits event-driven glue within Azure, but portability across providers requires containerised workloads on an open orchestrator such as Kubernetes.
- ✗
AWS Lambda
Why it's wrong here
AWS Lambda locks workloads to AWS through proprietary event sources, IAM roles and deployment tooling, so code cannot move to another provider unmodified. It suits event-driven processing inside AWS, whereas portable multi-cloud workloads need containers on an open orchestrator.
- ✗
VMware vSphere
Why it's wrong here
VMware vSphere virtualises servers and needs per-provider infrastructure plus licensing, so it does not deliver portable application packaging across clouds. It suits private or hybrid virtualisation estates, whereas container images on an open orchestrator move between providers unchanged.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CCSP question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.