CCSP Cloud Concepts, Architecture, and Design Practice Question
A company plans to deploy a multi-tier application across multiple cloud providers to avoid single points of failure. They need to ensure consistent security policies, including identity federation and network segmentation, across all environments. Which architecture consideration is MOST critical?
⚠ Common exam trap
CCSP often tests the need for centralized policy management in multi-cloud, as candidates may focus on specific technologies like SSO or encryption but miss the overarching requirement for consistent enforcement across heterogeneous environments.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implementing a unified security policy management tool
Implementing a unified security policy management tool is most critical for ensuring consistent security policies, including identity federation and network segmentation, across multiple cloud providers. Such a tool centralizes policy definition, translation, and enforcement, providing a single pane of glass for security management. This addresses the complexity of multi-cloud environments where native tools differ. Other options either do not address multi-cloud (single provider) or introduce inconsistency (different encryption standards).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Using a single cloud provider for all tiers
Why it's wrong here
Consolidating onto one provider directly contradicts the stated goal of avoiding single points of failure, and removes the cross-provider identity federation and segmentation the design requires. It tempts as a way to simplify policy consistency, and would suit a single-provider deployment where resilience across vendors is not a requirement.
- ✗
Storing all data in a single provider's data center
Why it's wrong here
Centralising all data in one provider's data centre reintroduces the exact single point of failure the multi-cloud design exists to eliminate, and undermines segmentation across environments. It tempts because a single repository simplifies governance, and would fit a scenario where availability and provider independence are not required.
- ✗
Using different encryption standards for each provider
Why it's wrong here
Divergent encryption standards per provider prevent a uniform cryptographic baseline, so data crossing provider boundaries cannot be consistently protected or audited. It tempts as a way to honour each provider's native capabilities, and would be reasonable where workloads never interoperate and no common policy is mandated.
- ✓
Implementing a unified security policy management tool
Why this is correct
A unified policy management tool enforces identity federation and segmentation rules identically across providers, satisfying the stem's demand for consistent security policies. Without centralised control, each provider's native tooling diverges, creating gaps that undermine the multi-provider redundancy goal.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 934-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.