hardMultiple SelectObjective-mapped
CCSP Practice Question: Implementing a software-defined perimeter (SDP)…
A company is implementing a software-defined perimeter (SDP) for their cloud environment. Which THREE characteristics are typical of an SDP? (Choose three.)
⚠ Common exam trap
A common mix-up: candidates confuse SDP's dynamic, identity-based firewall rules with traditional static IP whitelisting (Option A), failing to recognize that SDP eliminates reliance on IP addresses for access control.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Dynamic firewall rules based on user identity.
Software-defined perimeter (SDP) architecture uses dynamic firewall rules that are created on-the-fly based on user identity and device posture, rather than static IP addresses. The SDP controller authenticates the user and then dynamically provisions a firewall rule to allow the user's specific IP address to access the requested application, ensuring zero-trust network access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Static IP whitelisting.
Why it's wrong here
SDP uses dynamic, identity-based access, not static IPs.
- ✓
Dynamic firewall rules based on user identity.
Why this is correct
SDP adjusts rules dynamically based on user identity.
- ✓
Application-layer access control.
Why this is correct
SDP controls access at the application layer.
- ✓
Mutual authentication between client and controller.
Why this is correct
Mutual authentication ensures both ends are verified.
- ✗
Single-factor authentication.
Why it's wrong here
SDP typically requires multi-factor authentication.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.