mediumMultiple ChoiceObjective-mapped
CCSP Practice Question: Which vulnerability is considered a…
Which vulnerability is considered a cloud-specific API security issue?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Broken Object Level Authorization (BOLA)
Broken Object Level Authorization (BOLA or IDOR) is a common API vulnerability where an attacker can access objects by modifying IDs. This is not unique to cloud but is critical in cloud APIs due to shared responsibility.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Broken Object Level Authorization (BOLA)
Why this is correct
BOLA is a cloud-relevant API vulnerability where object access controls are insufficient.
- ✗
SQL Injection
Why it's wrong here
SQL injection is a database vulnerability, not specifically API or cloud.
- ✗
Cross-Site Request Forgery (CSRF)
Why it's wrong here
CSRF is a general web vulnerability.
- ✗
Clickjacking
Why it's wrong here
Clickjacking is a UI manipulation attack.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.