How many Select Two (Multi-Select) Questions questions are on this page?

This page has 20 Select Two (Multi-Select) Questions scenario questions for the CCSP exam, each with detailed explanations and wrong-answer analysis.

How should I approach CCSP scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Certified Cloud Security Professional CCSP questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise Certified Cloud Security Professional CCSP practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

CCSP

exam code

ISC2

vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1easymulti select

Full question →

Which TWO of the following are valid considerations when performing forensic imaging of virtual machines in a public cloud? (Choose two.)

A
Time synchronization between the imaging tool and the VM clock is essential
Ensures accurate timeline.
B
The imaging process must be performed from within the same cloud region
Why wrong: Can be done cross-region.
C
Images of other tenants' VMs can be accessed through the hypervisor if needed
Why wrong: Isolation prevents cross-tenant access.
D
The cloud provider will provide hypervisor memory dumps upon request
Why wrong: Providers generally do not provide hypervisor memory.
E
Volatile data will be lost if the VM is powered off before imaging
Memory data is lost on power off.

Select Two (Multi-Select) Questions

How to approach select two (multi-select) questions

Quick answer

Related CCSP topic practice pages

Cloud Application Security practice questions

Cloud Security Operations practice questions

Legal, Risk, and Compliance practice questions

Cloud Data Security practice questions

Cloud Platform and Infrastructure Security practice questions

Cloud Concepts, Architecture, and Design practice questions

CCSP fundamentals practice questions

CCSP scenario practice questions

CCSP troubleshooting practice questions

Practice scenarios

Which TWO of the following are valid considerations when performing forensic imaging of virtual machines in a public cloud? (Choose two.)

An organization wants to prevent secrets from being exposed in source code. Which two practices should they adopt? (Choose TWO.)

Which TWO best practices help secure a cloud application's runtime environment?

A security architect is designing network segmentation for a multi-tier application in the cloud. Which TWO configurations help enforce micro-segmentation? (Choose two.)

Which TWO of the following are considered best practices for securing containerized applications in a cloud environment?

Which TWO of the following are key elements of a cloud service agreement (CSA) for legal compliance?

A security auditor is reviewing a cloud provider's virtualisation infrastructure. Which TWO mechanisms ensure VM isolation at the hardware level to prevent one tenant from accessing another's resources?

A cloud security architect is implementing a CI/CD pipeline for a containerized application on AWS. Which TWO practices should be integrated to enforce container image security?

A company uses a cloud KMS with HSM-backed keys for regulatory compliance. They need to allow a cloud service to use a key for encryption while retaining the ability to revoke access at any time. Which TWO key management models satisfy this? (Choose two.)

A company's cloud security policy mandates strict control over encryption keys used for data at rest. Which THREE practices are recommended for secure key management in the cloud?

Which TWO of the following are required elements of a valid Business Continuity Plan (BCP) in the cloud?

Which THREE of the following are key characteristics of cloud computing as defined by NIST SP 800-145?

Which THREE of the following are key considerations when conducting a cloud risk assessment?

Which TWO of the following are best practices for cloud key management?

A company is negotiating a cloud contract and wants to ensure data ownership and deletion. Which TWO clauses should be included? (Select two.)

A DevSecOps team is implementing a secure container supply chain. Which THREE practices should they adopt to ensure image integrity and trust from build to deployment?

Which THREE are best practices for implementing secrets management in cloud applications?

A cloud security team is developing an incident response plan for a SaaS application hosted on a public cloud. During the preparation phase, which TWO steps are most critical to include?

Which THREE of the following are key considerations when designing a key management lifecycle for cloud data encryption?