CCSP Cloud Concepts, Architecture, and Design Practice Question
An organization is adopting a hybrid cloud strategy and needs to ensure secure connectivity between on-premises and cloud environments. Which TWO approaches are most appropriate for this purpose?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Site-to-site VPN over the public internet
VPN and dedicated private connections (like AWS Direct Connect or Azure ExpressRoute) are standard for secure hybrid cloud connectivity. Cloud access security brokers (CASBs) are for monitoring, not connectivity; public internet is not secure; MPLS is a type of private connection but less common in cloud contexts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Site-to-site VPN over the public internet
Why this is correct
VPN provides encrypted connectivity over the internet.
- ✗
Direct exposure of on-premises services to the cloud via public internet
Why it's wrong here
Public internet is insecure without encryption.
- ✓
Dedicated private network connection (e.g., AWS Direct Connect)
Why this is correct
Private connections offer low latency and consistent performance.
- ✗
Cloud access security broker (CASB)
Why it's wrong here
CASB is for security policy enforcement, not connectivity.
- ✗
MPLS-based VPN from a telecom provider
Why it's wrong here
MPLS is a private network but typically used for WAN, not directly for cloud connectivity.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.