CCSP Cloud Concepts, Architecture, and Design Practice Question
Which TWO of the following are essential characteristics of cloud computing as defined by NIST SP 800-145?
⚠ Common exam trap
CCSP often tests the distinction between NIST's five essential characteristics and commonly associated but non-listed concepts like multitenancy and virtualization, which candidates mistakenly select because they are ubiquitous in cloud implementations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Measured service
NIST SP 800-145 defines five essential characteristics of cloud computing, and 'Measured service' (A) is one of them: cloud systems automatically control and optimize resource use via metering capabilities, providing transparency for both provider and consumer. 'Resource pooling' (E) is also an essential characteristic, where the provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with resources dynamically assigned and reassigned according to demand. Multitenancy (B) is a consequence of resource pooling but is not itself listed as a separate essential characteristic in NIST SP 800-145. Virtualization (C) is a common enabling technology for cloud computing but is not one of the five NIST essential characteristics. Auditability (D) is a desirable governance property but is not included in the NIST definition of essential cloud characteristics.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Measured service
Why this is correct
Measured service is one of the five essential characteristics in NIST SP 800-145: resource usage is monitored, controlled and reported, providing transparency for both provider and consumer. Metering underpins the pay-per-use billing model that distinguishes cloud from traditional hosting.
- ✗
Multitenancy
Why it's wrong here
NIST SP 800-145 lists five essential characteristics: on-demand self-service, broad network access, resource pooling, rapid elasticity and measured service. Multitenancy underpins resource pooling but is not itself named. It is tempting because it is genuinely central to public cloud architecture.
- ✗
Virtualization
Why it's wrong here
Virtualization is the enabling technology behind resource pooling, not one of the five named essential characteristics in NIST SP 800-145. It tempts because cloud platforms depend on it, and it would be correct if the question asked what underpins pooled, elastic compute.
- ✗
Auditability
Why it's wrong here
Auditability is a control consideration, not one of NIST SP 800-145's five essential characteristics: on-demand self-service, broad network access, resource pooling, rapid elasticity and measured service. It tempts because auditable logs and traceability genuinely matter in cloud governance, and auditability would be a legitimate requirement when selecting a provider or designing compliance controls.
- ✓
Resource pooling
Why this is correct
Resource pooling lets providers serve multiple consumers from a shared pool of configurable computing resources, dynamically assigning and reassigning them. NIST SP 800-145 lists it among the five essential characteristics, satisfying the multi-tenancy and elasticity demands of the cloud model.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CCSP question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.