(ISC)2 CCSP - Certified Cloud Security Professional - Cloud Architecture Data Security Platform Application Operations Legal

By Sam Patel · Updated May 25, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged2,314
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.6 (40)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

An organization is evaluating cloud service providers for a new workload. The security team wants to verify that the cloud provider's security controls are independently assessed. Which assessment standard provides the MOST comprehensive and recognized cloud security assurance?

Answer choices

  • A. The cloud provider's self-attestation security questionnaire

  • B. SOC 2 Type II report (covers Security, Availability, Confidentiality, Processing Integrity, and Privacy Trust Service Criteria over a period of time) and ISO 27001 certification, along with cloud-specific standards like CSA STAR certification

  • C. The cloud provider's marketing security whitepaper

  • D. A one-time (Type I) SOC 2 report covering a specific point in time

Question 2

A cloud security team is performing a threat model for a serverless application (AWS Lambda). Which threats are UNIQUE or more significant in a serverless architecture compared to traditional VMs?

Answer choices

  • A. Serverless applications have no unique threats — standard web application threats apply

  • B. Function injection attacks (injecting malicious code via event sources), over-privileged IAM roles (blast radius of a compromised function), cold start denial of service, event source injection (malicious messages triggering excessive function invocations), and supply chain attacks through dependencies

  • C. DDoS attacks are the primary threat to serverless applications

  • D. Serverless is inherently more secure than VMs because the infrastructure is managed by the provider

Question 3

An organization is transitioning to a cloud-native DevSecOps model. Security testing must be integrated into the CI/CD pipeline without significantly slowing deployment velocity. Which approach BEST achieves this balance?

Answer choices

  • A. Require manual security review of all code before merging — this ensures thorough review

  • B. Implement: SAST (Static Application Security Testing) and SCA (Software Composition Analysis) as automated pre-commit/pull request checks, container image scanning in the build stage, secrets scanning to prevent credential commits, IaC scanning (Terraform/CloudFormation) for misconfigurations, and DAST (Dynamic Application Security Testing) in pre-production — only block deployments for critical/high findings

  • C. Conduct quarterly penetration tests instead of integrating security into CI/CD

  • D. Deploy to production first, then scan for vulnerabilities using post-deployment tools

Question 4

A multinational organization has cloud workloads in AWS, Azure, and GCP. The security team struggles with visibility across all three platforms. Which approach provides the MOST comprehensive multi-cloud security visibility?

Answer choices

  • A. Use each cloud provider's native security tools independently (AWS Security Hub, Azure Defender, GCP Security Command Center)

  • B. Implement a Cloud Security Posture Management (CSPM) platform that aggregates findings across all cloud providers, normalizes security findings, and provides unified compliance reporting

  • C. Standardize on a single cloud provider to eliminate multi-cloud complexity

  • D. Hire dedicated security specialists for each cloud platform

Question 5

A cloud-hosted application is experiencing intermittent availability issues. Investigation reveals the application auto-scaling group is not scaling fast enough, causing request queuing during traffic spikes. The security team must consider availability as a security concern. Which cloud architecture pattern improves resilience against this issue?

Answer choices

  • A. Increase the maximum instance count in the auto-scaling group — this prevents scaling limitations

  • B. Implement a combination of: pre-warming based on predicted load patterns, queue-based load leveling (SQS/Pub-Sub) to decouple request intake from processing, circuit breakers to prevent cascading failures, and predictive auto-scaling using historical patterns

  • C. Migrate to a dedicated server environment to eliminate shared cloud resource contention

  • D. Disable auto-scaling and pre-provision maximum expected capacity at all times