easyMultiple Choice
CCSP Practice Question: Ensure that their cloud deployment has the…
A company wants to ensure that their cloud deployment has the highest level of isolation between tenants. Which deployment model is most appropriate?
⚠ Common exam trap
ISC2 often tests the misconception that hybrid cloud provides the highest isolation because it includes a private component, but the trap is that hybrid cloud still incorporates a public cloud element, which inherently introduces multi-tenancy and reduces overall isolation compared to a fully private cloud.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Private cloud
Private cloud (Option C) is correct because it is a single-tenant environment where the cloud infrastructure is dedicated exclusively to one organization, providing the highest level of isolation between tenants. In a private cloud, network segmentation is achieved through technologies such as VLANs (IEEE 802.1Q), VXLANs (RFC 7348), and dedicated hypervisor-level resource pools, ensuring that no other tenant's workloads share the same physical or virtual resources. This eliminates the multi-tenancy risks inherent in public and community clouds, where isolation relies on shared infrastructure and logical separation mechanisms like hypervisor-enforced memory isolation and network overlays.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
Public cloud tenants share provider-managed physical hosts, hypervisors and network fabric, so isolation relies on logical controls rather than dedicated infrastructure. It is the right model when elasticity and cost efficiency matter more than strict tenant separation.
- ✗
Hybrid cloud
Why it's wrong here
Hybrid cloud combines private and public environments but the public portion still shares multi-tenant infrastructure, so it does not maximise isolation. It suits workloads needing to keep sensitive data on-premises while bursting or integrating with cloud services.
- ✓
Private cloud
Why this is correct
A private cloud dedicates compute, storage and networking to a single organisation, eliminating the shared hypervisor, hardware and network paths that multi-tenant public clouds rely on. This delivers the strongest tenant isolation, satisfying the requirement for the highest level of separation between tenants.
- ✗
Community cloud
Why it's wrong here
A community cloud shares infrastructure among organisations with common concerns, so tenants remain co-resident on the same hardware — the opposite of maximum isolation. It is tempting because it genuinely suits regulated sectors pooling compliance controls, such as banks sharing a hardened platform. Maximum tenant isolation instead requires a deployment model where infrastructure is dedicated to one organisation.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CCSP question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.