Certified Cloud Security Professional

An organization migrating to PaaS asks which security responsibilities it sheds compared with its previous IaaS deployment. Which answer is precise?

A CCSP is told that because a SaaS provider holds ISO 27001 certification, the customer's own ISMS scope can exclude that service entirely. What is the correct assessment?

Which statement about multitenancy risk is MOST accurate for a CCSP evaluating a public cloud provider?

An enterprise wants to avoid the situation where exiting its primary provider would require rewriting most of its platform. Which architectural discipline MOST reduces that exposure?

A workload processes highly sensitive data in a jurisdiction where the CCSP is concerned about compelled provider disclosure. Which control most directly addresses that specific concern?

Which describes the security consequence of cloud self-service provisioning that a CCSP must design around?

An architect proposes a single cloud account containing production, staging, and development to simplify networking. What is the strongest security objection?

Which is the MOST accurate characterization of a cloud landing zone's security role?

A CCSP must advise on serverless adoption for a regulated workload. Which risk deserves the MOST attention relative to VM-based deployment?

Which describes the correct use of a provider's shared responsibility matrix during a control gap analysis?