Certified Cloud Security Professional (CCSP)
Practice Test Exam
1. A startup wants to deploy an application that requires
significant manual intervention for scaling and patching. They
want maximum control over the operating system and
middleware but do not want to manage physical hardware.
Which cloud service model fits this scenario?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Correct Answer: C
Rationale: IaaS provides virtualized computing resources where
the customer controls the operating system, storage, and
applications, but does not manage physical infrastructure. PaaS
abstracts OS and middleware management, and SaaS provides
complete applications .
,2. A multinational bank must keep sensitive financial data on
servers physically located within the country due to sovereignty
laws but wants to leverage cloud scalability for non-sensitive
compute tasks. Which deployment model is MOST appropriate?
A) Community Cloud
B) Hybrid Cloud
C) Public Cloud
D) Distributed Cloud
Correct Answer: B
Rationale: A hybrid cloud combines public cloud services with
on-premises or private cloud infrastructure, allowing sensitive
data to remain on-premises for compliance while using public
cloud for scalable compute .
3. Which document specifically defines the metrics for uptime,
performance, and penalties for non-compliance in a cloud
contract?
A) Memorandum of Understanding
,B) Business Partnership Agreement
C) Service Level Agreement
D) Non-Disclosure Agreement
Correct Answer: C
Rationale: An SLA specifies the level of service expected,
including metrics such as uptime percentage and remedies or
penalties if the provider fails to meet commitments .
4. An e-commerce site automatically adds more web server
instances during a flash sale and reduces them when demand
drops. Which essential cloud characteristic does this describe?
A) Measured Service
B) Resource Pooling
C) Broad Network Access
D) Rapid Elasticity
Correct Answer: D
, Rationale: Elasticity is the ability to scale resources up or down
automatically based on demand, distinct from scalability which
implies handling growth .
5. Which component is responsible for managing virtual
machines and abstracting physical hardware from guest
operating systems?
A) The Management Plane
B) The Hypervisor
C) The Container Runtime
D) The Virtual Fabric
Correct Answer: B
Rationale: The hypervisor (or Virtual Machine Monitor) allows
multiple operating systems to run concurrently on a single host
and manages allocation of physical hardware resources .
6. What are the phases of the cloud secure data lifecycle
according to CCSP?
Practice Test Exam
1. A startup wants to deploy an application that requires
significant manual intervention for scaling and patching. They
want maximum control over the operating system and
middleware but do not want to manage physical hardware.
Which cloud service model fits this scenario?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Correct Answer: C
Rationale: IaaS provides virtualized computing resources where
the customer controls the operating system, storage, and
applications, but does not manage physical infrastructure. PaaS
abstracts OS and middleware management, and SaaS provides
complete applications .
,2. A multinational bank must keep sensitive financial data on
servers physically located within the country due to sovereignty
laws but wants to leverage cloud scalability for non-sensitive
compute tasks. Which deployment model is MOST appropriate?
A) Community Cloud
B) Hybrid Cloud
C) Public Cloud
D) Distributed Cloud
Correct Answer: B
Rationale: A hybrid cloud combines public cloud services with
on-premises or private cloud infrastructure, allowing sensitive
data to remain on-premises for compliance while using public
cloud for scalable compute .
3. Which document specifically defines the metrics for uptime,
performance, and penalties for non-compliance in a cloud
contract?
A) Memorandum of Understanding
,B) Business Partnership Agreement
C) Service Level Agreement
D) Non-Disclosure Agreement
Correct Answer: C
Rationale: An SLA specifies the level of service expected,
including metrics such as uptime percentage and remedies or
penalties if the provider fails to meet commitments .
4. An e-commerce site automatically adds more web server
instances during a flash sale and reduces them when demand
drops. Which essential cloud characteristic does this describe?
A) Measured Service
B) Resource Pooling
C) Broad Network Access
D) Rapid Elasticity
Correct Answer: D
, Rationale: Elasticity is the ability to scale resources up or down
automatically based on demand, distinct from scalability which
implies handling growth .
5. Which component is responsible for managing virtual
machines and abstracting physical hardware from guest
operating systems?
A) The Management Plane
B) The Hypervisor
C) The Container Runtime
D) The Virtual Fabric
Correct Answer: B
Rationale: The hypervisor (or Virtual Machine Monitor) allows
multiple operating systems to run concurrently on a single host
and manages allocation of physical hardware resources .
6. What are the phases of the cloud secure data lifecycle
according to CCSP?
