CCSP Cloud Platform and Infrastructure Security

Question 1

Which cloud infrastructure component acts as a logical boundary to isolate resources between different tenants or business units?

Accepted Answer

Virtual Private Cloud (VPC)

Answer

A Virtual Private Cloud (VPC) creates an isolated network segment within the cloud provider's infrastructure to separate tenant resources.

Question 2

What is the primary security concern with a hypervisor in a multi-tenant cloud environment?

Accepted Answer

A compromised hypervisor can expose all guest VMs running on that host

Answer

Because the hypervisor controls all VMs on a host, a vulnerability in it can allow an attacker to break out of one VM and access others on the same physical host.

Question 3

What does the term 'VM sprawl' refer to in cloud environments?

Accepted Answer

The uncontrolled proliferation of virtual machine instances that increases attack surface and management overhead

Answer

VM sprawl occurs when virtual machines are created without proper lifecycle management, leading to forgotten, unpatched VMs that expand the attack surface.

Question 4

Which network security control is typically used at the boundary of a cloud VPC to filter inbound and outbound traffic?

Accepted Answer

Security Group / Network Access Control List (NACL)

Answer

Security Groups and NACLs are cloud-native controls that filter traffic at the VPC or subnet level based on IP, port, and protocol rules.

Question 5

What is a key security risk of using shared storage in a multi-tenant cloud environment?

Accepted Answer

Data remnance — residual data from one tenant being accessible to another

Answer

Data remnance (or data remanence) is the risk that deleted data from one tenant persists on shared storage and could potentially be read by another tenant.

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP Cloud Platform and Infrastructure Security