โ† All CISSP Flashcard Decks

CISSP Cloud Security Flashcards

6 cards from real CISSP practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 6 CISSP Cloud Security flashcards as text
  1. Which cloud deployment model provides exclusive infrastructure for a single organization?

    Answer: Private cloud

    A private cloud is dedicated solely to one organization, offering greater control and isolation.

  2. What is the shared responsibility model in cloud security?

    Answer: Security responsibilities are divided between the cloud provider and the customer

    In the shared responsibility model, the cloud provider secures the underlying infrastructure while the customer secures their data and configurations.

  3. Which cloud service model gives customers the most control over the operating system and runtime environment?

    Answer: IaaS

    IaaS (Infrastructure as a Service) provides raw compute, storage, and networking, giving customers full OS and runtime control.

  4. What does the term 'cloud bursting' refer to?

    Answer: Automatically scaling workloads from a private cloud to a public cloud during peak demand

    Cloud bursting allows workloads to overflow from a private cloud to a public cloud when on-premises capacity is exceeded.

  5. Which standard specifically addresses security controls for cloud service providers?

    Answer: ISO 27017

    ISO 27017 provides cloud-specific security controls and guidance extending ISO 27001 for cloud environments.

  6. What is a key security risk unique to multi-tenant cloud environments?

    Answer: VM escape or tenant isolation failure

    VM escape allows an attacker to break out of a virtual machine and access the hypervisor or other tenants' data.