CCSP Cloud Security Operations Practice Question
An organization wants to ensure that all resources are compliant with CIS benchmarks. Which cloud service provides a unified view of compliance posture and recommendations?
⚠ Common exam trap
Watch out — candidates often confuse a policy enforcement service (which enforces rules) with a cloud security posture management (CSPM) tool (which provides the unified compliance posture and scoring), or they mistakenly think cloud monitoring and logging or SIEM services can serve as a compliance dashboard when they are designed for other purposes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cloud Security Posture Management (CSPM) tool
A cloud security posture management (CSPM) tool provides a unified, centralized view of an organization's security and compliance posture, including specific recommendations aligned with CIS benchmarks. It aggregates findings from various security controls into a single score and actionable guidance, making it the correct service for monitoring compliance against CIS standards.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Security Information and Event Management (SIEM) tool
Why it's wrong here
A SIEM tool is used for security event analysis and incident response, not for providing a unified compliance posture score.
- ✓
Cloud Security Posture Management (CSPM) tool
Why this is correct
Correct. A CSPM tool provides a unified compliance score and recommendations.
- ✗
Cloud monitoring and logging service
Why it's wrong here
A monitoring and logging service is for collecting and analyzing metrics and logs, not for compliance posture scoring.
- ✗
Policy-as-code enforcement service
Why it's wrong here
A policy-as-code service enforces rules but does not provide a unified compliance posture view or scoring.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.