1
Single choice~110s
An organization migrating to PaaS asks which security responsibilities it sheds compared with its previous IaaS deployment. Which answer is precise?
Certified Cloud Security Professional
ISC2_CCSPReady to test yourself?
A timed, blueprint-proportional exam drawn fresh from this bank — with a per-domain score report.
🔓 Free preview: showing 10 of 150 questions. Unlock the full bank — every question, explanation, and reference.
Unlock all 150 questions →10 questions across 6 topics. Choose an answer for each question, then check it to see the correct answer and explanation.
Filter by topic
10 questions in Cloud Concepts, Architecture and Design
D1_CONCEPTS
Cloud Concepts, Architecture and Design
10 questions in topicCloud characteristics, service and deployment models, shared responsibility, reference architecture, and secure design principles.
2
Single choice~110s
A CCSP is told that because a SaaS provider holds ISO 27001 certification, the customer's own ISMS scope can exclude that service entirely. What is the correct assessment?
3
Single choice~110s
Which statement about multitenancy risk is MOST accurate for a CCSP evaluating a public cloud provider?
4
Single choice~110s
An enterprise wants to avoid the situation where exiting its primary provider would require rewriting most of its platform. Which architectural discipline MOST reduces that exposure?
5
Single choice~110s
A workload processes highly sensitive data in a jurisdiction where the CCSP is concerned about compelled provider disclosure. Which control most directly addresses that specific concern?
6
Single choice~110s
Which describes the security consequence of cloud self-service provisioning that a CCSP must design around?
7
Single choice~110s
An architect proposes a single cloud account containing production, staging, and development to simplify networking. What is the strongest security objection?
8
Single choice~110s
Which is the MOST accurate characterization of a cloud landing zone's security role?
9
Single choice~110s
A CCSP must advise on serverless adoption for a regulated workload. Which risk deserves the MOST attention relative to VM-based deployment?
10
Single choice~110s
Which describes the correct use of a provider's shared responsibility matrix during a control gap analysis?