CCSP Cloud Application Security Practice Question
Which TWO of the following are primary objectives of a cloud application security program?
⚠ Common exam trap
ISC2 often tests the distinction between security objectives and operational or architectural practices, trapping candidates who confuse 'continuous deployment' or 'microservices' with security goals because they are commonly discussed in cloud security contexts but are not primary objectives.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Maintaining application availability
Maintaining application availability is a primary objective of a cloud application security program because it directly supports the security triad of confidentiality, integrity, and availability (CIA). In a cloud environment, availability ensures that authorized users can access applications and data when needed, which is critical for business continuity and is often enforced through SLAs, redundancy, and DDoS protection mechanisms. Without availability, security controls become irrelevant as the service is effectively denied.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Maintaining application availability
Why this is correct
Availability is a key security objective (CIA triad).
- ✗
Performing continuous deployment
Why it's wrong here
Continuous deployment is a DevOps practice, not a security objective.
- ✗
Implementing a microservices architecture
Why it's wrong here
Microservices is an architectural pattern, not a security objective.
- ✓
Ensuring data confidentiality and integrity
Why this is correct
Confidentiality and integrity are fundamental security objectives.
- ✗
Adopting Agile development practices
Why it's wrong here
Agile is a development methodology, not a security objective.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.