CCSP 2022 Beginner Quiz - Free Practice Quiz

Question 1 of 60

According to the CCSP 2022 CBK, which cloud service model grants customers the MOST control over operating systems, middleware, and applications?

A Software as a Service (SaaS) B Platform as a Service (PaaS) C Infrastructure as a Service (IaaS) D Function as a Service (FaaS)

1 / 60

Question 2 of 60

According to CCSP 2022 CBK, which NIST cloud characteristic allows cloud infrastructure to quickly scale resources up or down to meet changing demand?

A Broad network access B On-demand self-service C Rapid elasticity D Measured service

2 / 60

Question 3 of 60

Which CCSP 2022 CBK domain focuses on cloud data security, including data lifecycle management, data discovery, classification, and the controls protecting data throughout its lifecycle?

A Domain 1 â€” Cloud Concepts B Domain 5 â€” Cloud Security Operations C Domain 2 â€” Cloud Data Security D Domain 3 â€” Cloud Platform and Infrastructure Security

3 / 60

Question 4 of 60

In CCSP 2022 CBK, which cloud service model allows developers to deploy applications without managing underlying servers, operating systems, or middleware?

A Infrastructure as a Service (IaaS) B Function as a Service (FaaS) C Platform as a Service (PaaS) D Software as a Service (SaaS)

4 / 60

Question 5 of 60

Which cloud deployment model provides cloud services exclusively to a single organization, managed either on-premises or by a third-party provider?

A Public cloud B Community cloud C Private cloud D Hybrid cloud

5 / 60

Question 6 of 60

Which CCSP 2022 CBK term describes the risk that migrating data to a cloud provider makes it difficult or cost-prohibitive to switch to a different provider?

A Resource pooling B Data sovereignty C Vendor lock-in D Elasticity risk

6 / 60

Question 7 of 60

According to CCSP 2022 CBK, which cloud security risk occurs when customer data remains accessible on cloud storage media after the customer deletes it, due to the provider's data retention practices?

A Data sovereignty risk B Vendor lock-in C Insecure data deletion / data remanence D Noisy neighbor problem

7 / 60

Question 8 of 60

According to CCSP 2022 CBK, which technical vulnerability exists when a cloud provider fails to properly isolate one tenant's data from another in shared databases or storage systems?

A SQL injection in cloud databases B Cross-site scripting in cloud applications C Tenant data commingling / multi-tenancy isolation failure D Denial of service attack

8 / 60

Question 9 of 60

In the CCSP 2022 CBK, which shared responsibility principle states that cloud providers are responsible for security OF the cloud while customers are responsible for security IN the cloud?

A Cloud provider liability model B Customer duty of care C Shared responsibility model D Vendor lock-in mitigation strategy

9 / 60

Question 10 of 60

In CCSP 2022 CBK, which cloud security control protects data stored in cloud databases and file systems from unauthorized access if physical storage media is stolen or improperly decommissioned?

A Firewall rules B Network access control lists C Encryption at rest D Backup policies

10 / 60

Question 11 of 60

Which CCSP 2022 CBK threat model concept involves an attacker who is an employee of the cloud provider with privileged access to customer environments?

A External attacker B Hacktivist group C Malicious cloud provider insider D Nation-state actor

11 / 60

Question 12 of 60

Which CCSP 2022 CBK access control framework grants permissions based on user roles (job functions) rather than individual user identities?

A Discretionary Access Control (DAC) B Mandatory Access Control (MAC) C Role-Based Access Control (RBAC) D Attribute-Based Access Control (ABAC)

12 / 60

Question 13 of 60

Which CCSP 2022 CBK concept describes the risk that data stored in a cloud provider's infrastructure may be subject to the laws of the provider's operating country?

A Vendor lock-in B Data portability risk C Data sovereignty / jurisdiction risk D Privacy Shield risk

13 / 60

Question 14 of 60

Which CCSP 2022 CBK concept describes the audit trail that documents who accessed, modified, or moved data throughout its lifecycle in a cloud environment?

A Data masking B Data classification C Data lineage and audit logging D Data retention policy

14 / 60

Question 15 of 60

In CCSP 2022 CBK, which container security concept involves using a minimal base image with only the software required to run the application, eliminating unnecessary components that could be exploited?

A Container orchestration B Container network policy C Minimal base image / container hardening D Runtime container monitoring

15 / 60

Question 16 of 60

In CCSP 2022 CBK Domain 4, which software security principle verifies that all external inputs to a cloud application are checked for type, format, length, and acceptable values before being processed?

A Input validation B Output encoding C Parameterized queries D Error handling

16 / 60

Question 17 of 60

According to CCSP 2022 CBK Domain 1, which cloud characteristic allows customers to provision computing resources automatically without requiring human interaction with each service provider?

A On-demand self-service B Resource pooling C Broad network access D Rapid elasticity

17 / 60

Question 18 of 60

According to CCSP 2022 CBK Domain 3, which security architecture pattern separates different cloud workloads into isolated network segments to limit lateral movement in case of compromise?

A Network segmentation / micro-segmentation B Encryption in transit C Multi-factor authentication D Role-based access control

18 / 60

Question 19 of 60

According to CCSP 2022 CBK, which cloud governance control ensures that cloud resources are deployed only after security requirements have been defined and approved?

A Security by design / secure cloud onboarding process B Automated compliance monitoring C Security Information and Event Management (SIEM) D Post-deployment vulnerability scanning

19 / 60

Question 20 of 60

According to CCSP 2022 CBK, which deployment model describes an organization using both on-premises private cloud and public cloud services, with orchestration between them?

A Hybrid cloud B Community cloud C Public cloud only D Private cloud only

20 / 60

Question 21 of 60

In CCSP 2022 CBK, which data security concept ensures that data cannot be read by unauthorized parties during transmission between cloud components?

A Encryption in transit B Data availability C Data integrity D Data masking

21 / 60

Question 22 of 60

Which CCSP 2022 CBK standard provides a framework for information security management systems (ISMS) that cloud providers and customers commonly use to demonstrate security governance maturity?

A ISO/IEC 27001 and 27017 (cloud security) B PCI DSS C NIST SP 800-53 D CIS Benchmarks

22 / 60

Question 23 of 60

Which cloud security technology uses hardware-isolated processor enclaves to protect data in use from the host operating system, hypervisor, and other tenants, even from the cloud provider itself?

A Confidential computing using Trusted Execution Environments (TEEs) â€” hardware-isolated enclaves (Intel SGX, AMD SEV) that protect data during processing from the host OS, hypervisor, and other tenants B Encryption in transit C Tokenization D Encryption at rest

23 / 60

Question 24 of 60

According to CCSP 2022 CBK, which cloud service allows multiple organizations in the same industry to share cloud infrastructure and resources while maintaining individual data isolation?

A Community cloud B Public cloud C Private cloud D Hybrid cloud

24 / 60

Question 25 of 60

Which CCSP 2022 CBK concept describes the ability to detect unauthorized changes to cloud data or system configurations?

A Integrity monitoring B Confidentiality enforcement C Availability monitoring D Access control enforcement

25 / 60

Question 26 of 60

In CCSP 2022 CBK, which concept ensures that cloud resources are used only for authorized purposes and that usage is tracked for billing, compliance, and security purposes?

A Accountability and auditability B Availability monitoring C Data masking D Resource pooling

26 / 60

Question 27 of 60

According to CCSP 2022 CBK, which incident response consideration is UNIQUE to cloud environments compared to on-premises incidents?

A Limited forensic access â€” cloud customers may not directly access underlying hypervisor logs, physical media, or network captures; they must work with provider APIs and cloud-native logging B Requirement for incident documentation C Importance of communication with affected parties D Need for security monitoring tools

27 / 60

Question 28 of 60

Which CCSP 2022 CBK concept describes the process of documenting all third-party cloud services used by an organization, including shadow IT cloud services discovered through network monitoring?

A Cloud service inventory and shadow IT discovery B Cloud workload protection C Cloud access security broker (CASB) D Cloud security posture management

28 / 60

Question 29 of 60

According to CCSP 2022 CBK, which legal agreement between a cloud provider and customer defines performance expectations, uptime guarantees, and remedies for service failures?

A Service Level Agreement (SLA) B Data Processing Agreement (DPA) C Non-Disclosure Agreement (NDA) D Master Service Agreement (MSA)

29 / 60

Question 30 of 60

According to CCSP 2022 CBK Domain 2, which data lifecycle phase involves permanently destroying data that is no longer needed to prevent unauthorized future access?

A Data destruction / data sanitization B Data creation C Data storage D Data archival

30 / 60

Question 31 of 60

Which CCSP 2022 CBK concept describes the independent audit report that provides customers with assurance about a cloud service organization's security, availability, and confidentiality controls?

A ISO 27001 certification report B PCI DSS Report on Compliance (ROC) C NIST CSF maturity assessment D SOC 2 Type II report (AICPA Trust Services Criteria)

31 / 60

Question 32 of 60

According to CCSP 2022 CBK Domain 3, which security control monitors network traffic within cloud environments to detect malicious activity and policy violations?

A Endpoint detection and response (EDR) B Application performance monitoring C Physical security cameras D Cloud-native intrusion detection system (IDS) / network monitoring

32 / 60

Question 33 of 60

Which CCSP 2022 CBK cloud security concept involves layering multiple independent security controls so that the failure of one does not compromise overall security?

A Security through obscurity B Least privilege C Separation of duties D Defense in depth

33 / 60

Question 34 of 60

Which CCSP 2022 CBK security control prevents a single cloud administrator from having unilateral access to make changes to critical systems without oversight?

A Availability monitoring B Encryption at rest C Physical access control D Separation of duties and dual control

34 / 60

Question 35 of 60

According to CCSP 2022 CBK, which data protection technique replaces sensitive data with a non-sensitive substitute (surrogate value) that can be mapped back to the original through a secure lookup table?

A Encryption B Pseudonymization C Data masking D Tokenization

35 / 60

Question 36 of 60

In CCSP 2022 CBK, which concept describes the legal process of preserving cloud-stored data for potential use in litigation, preventing deletion or modification?

A Data retention policy enforcement B Business continuity planning C Data archival policy D Litigation hold / legal hold

36 / 60

Question 37 of 60

In CCSP 2022 CBK, which type of virtualization technology allows multiple virtual machines to share a single physical server's resources while maintaining isolation between guests?

A Containerization B Application virtualization C Storage virtualization D Hypervisor-based virtualization (Type 1 or Type 2)

37 / 60

Question 38 of 60

According to CCSP 2022 CBK, which cloud security risk is UNIQUE to multi-tenant environments where one customer's workload affects the performance of adjacent customers?

A Shared responsibility gap B Vendor lock-in C Data sovereignty D Noisy neighbor problem

38 / 60

Question 39 of 60

Which CCSP 2022 CBK cloud network security concept uses software to dynamically create, manage, and reconfigure virtual network components (routers, firewalls, switches) without touching physical hardware?

A Traditional VLAN segmentation B Hardware-based firewall clusters C Physical network access controls D Software-Defined Networking (SDN)

39 / 60

Question 40 of 60

Which CCSP 2022 CBK security threat exploits weakly configured cloud APIs that allow unauthenticated or insufficiently authorized access to cloud resources?

A Physical access attack B Ransomware C Social engineering D Insecure cloud APIs / API abuse

40 / 60

Question 41 of 60

Which CCSP 2022 CBK control ensures that cloud provider personnel cannot access customer data without authorization and a verifiable business need?

A Physical security controls B Network segmentation C Encryption only D Access control and privileged access management

41 / 60

Question 42 of 60

Which CCSP 2022 CBK concept enables cloud users to access cloud services from any device using standard internet protocols and web browsers?

A Resource pooling B On-demand self-service C Rapid elasticity D Broad network access

42 / 60

Question 43 of 60

According to CCSP 2022 CBK, which cloud security assessment evaluates whether the customer's cloud deployment aligns with regulatory requirements and industry frameworks such as CSA CCM?

A Penetration testing B Vulnerability scanning C Third-party code review D Compliance audit / cloud security assessment against CSA Cloud Controls Matrix (CCM)

43 / 60

Question 44 of 60

According to CCSP 2022 CBK, which data security control prevents sensitive data from being displayed in full to users who do not have a business need to see it, replacing characters with symbols?

A Tokenization B Data classification C Encryption D Data masking / data obfuscation

44 / 60

Question 45 of 60

According to CCSP 2022 CBK, which cloud storage type provides a flat namespace where each object has a unique identifier, metadata, and data â€” ideal for unstructured data at massive scale?

A Block storage B File storage (NAS) C Database storage D Object storage

45 / 60

Question 46 of 60

In CCSP 2022 CBK, which type of cloud threat involves an attacker consuming all available cloud resources (compute, storage, API calls) to prevent legitimate users from accessing services?

A Man-in-the-middle attack B Cloud denial of service / resource exhaustion attack C SQL injection D Social engineering

46 / 60

Question 47 of 60

In CCSP 2022 CBK, which disaster recovery concept describes the maximum period of time a cloud service can be unavailable before causing unacceptable business impact?

A Recovery Point Objective (RPO) B Recovery Time Objective (RTO) C Mean Time Between Failures (MTBF) D Service Level Agreement (SLA) uptime guarantee

47 / 60

Question 48 of 60

Which CCSP 2022 CBK concept ensures cloud users can only access resources from specific geographic locations or device types, enforcing additional authentication for unusual access patterns?

A Encryption at rest B Context-aware / adaptive access control C VLAN segmentation D Data masking

48 / 60

Question 49 of 60

Which CCSP 2022 CBK concept describes the process of verifying that a cloud provider's security controls meet the organization's requirements before signing a contract?

A Vendor lock-in assessment B Cloud provider due diligence / security assessment C SLA negotiation D Penetration testing of provider

49 / 60

Question 50 of 60

According to CCSP 2022 CBK, which security assessment methodology provides an independent evaluation of a cloud provider's controls by a third-party auditor?

A Internal vulnerability scan B Third-party audit (SOC 2 Type II, ISO 27001 certification) C Customer penetration test D Self-attestation only

50 / 60

Question 51 of 60

Which CCSP 2022 CBK concept describes the technical and legal challenges that arise when cloud providers sub-contract services to other providers (sub-processors) without the customer's explicit knowledge?

A Resource pooling complexity B Supply chain risk / subprocessor risk C Noisy neighbor risk D Vendor lock-in

51 / 60

Question 52 of 60

According to CCSP 2022 CBK, which cloud business continuity strategy involves maintaining a fully operational duplicate cloud environment in a second region to enable near-zero RTO failover?

A Cold standby (backup restore) B Hot standby / active-active multi-region C Warm standby D Pilot light DR strategy

52 / 60

Question 53 of 60

In CCSP 2022 CBK Domain 4, which type of security testing specifically validates that the cloud application correctly enforces access controls and cannot be manipulated to expose data belonging to other tenants?

A Performance testing B Multi-tenancy isolation / authorization testing C Unit testing D Load testing

53 / 60

Question 54 of 60

Which CCSP 2022 CBK data classification level typically requires the STRONGEST access controls and encryption due to the potential for significant organizational harm if disclosed?

A Internal use only B Highly confidential / restricted data C Public data D Sensitive data

54 / 60

Question 55 of 60

According to CCSP 2022 CBK, which identity federation technology allows an organization's on-premises Active Directory identities to authenticate to cloud services without requiring separate cloud accounts?

A Proprietary cloud SSO only B Identity federation using SAML 2.0 or OpenID Connect â€” enabling SSO between on-premises IdP and cloud SPs C Cloud-native MFA only D Username/password synchronization to cloud

55 / 60

Question 56 of 60

In CCSP 2022 CBK, which container orchestration security control restricts container processes from running with elevated operating system privileges that could enable container breakout?

A Container image signing B Container privilege restrictions (non-root, read-only filesystem, dropped capabilities) C Container network policies D Container registry scanning

56 / 60

Question 57 of 60

Which CCSP 2022 CBK physical security control specifically protects against unauthorized physical access to cloud data center facilities?

A Network firewall B Physical access controls (biometrics, mantrap, security guards) C Encryption at rest D Intrusion detection system

57 / 60

Question 58 of 60

According to CCSP 2022 CBK Domain 3, which vulnerability SPECIFICALLY affects cloud hypervisor environments where a VM escapes its isolation boundary and gains access to the host or other VMs?

A SQL injection B VM escape attack C Cross-site scripting D Privilege escalation within a VM

58 / 60

Question 59 of 60

Which CCSP 2022 CBK cloud security domain covers the legal, contractual, regulatory, and compliance obligations for cloud service providers and customers, including privacy law and e-discovery?

A Domain 3 â€” Cloud Platform and Infrastructure Security B Domain 6 â€” Legal, Risk, and Compliance C Domain 4 â€” Cloud Application Security D Domain 2 â€” Cloud Data Security

59 / 60

Question 60 of 60

Which CCSP 2022 CBK threat involves an attacker accessing cloud management APIs without proper authentication, potentially gaining control over the customer's entire cloud environment?

A VM escape attack B Compromised cloud management credentials / API key exposure C Data exfiltration D Hypervisor vulnerability exploit

60 / 60