CISSP CISSP Cloud Security 1 — Questions and Answers
Question 1: Which cloud deployment model provides exclusive infrastructure for a single organization?
- Public cloud
- Private cloud (Correct answer)
- Hybrid cloud
- Community cloud
Correct answer: Private cloud
A private cloud is dedicated solely to one organization, offering greater control and isolation.
Question 2: What is the shared responsibility model in cloud security?
- The cloud provider is responsible for all security
- Security responsibilities are divided between the cloud provider and the customer (Correct answer)
- The customer is responsible for all security
- Security is managed by a third-party auditor
Correct answer: Security responsibilities are divided between the cloud provider and the customer
In the shared responsibility model, the cloud provider secures the underlying infrastructure while the customer secures their data and configurations.
Question 3: Which cloud service model gives customers the most control over the operating system and runtime environment?
- SaaS
- PaaS
- IaaS (Correct answer)
- FaaS
Correct answer: IaaS
IaaS (Infrastructure as a Service) provides raw compute, storage, and networking, giving customers full OS and runtime control.
Question 4: What does the term 'cloud bursting' refer to?
- A DDoS attack targeting cloud resources
- Automatically scaling workloads from a private cloud to a public cloud during peak demand (Correct answer)
- Data leakage from cloud storage
- Unauthorized access to multi-tenant cloud environments
Correct answer: Automatically scaling workloads from a private cloud to a public cloud during peak demand
Cloud bursting allows workloads to overflow from a private cloud to a public cloud when on-premises capacity is exceeded.
Question 5: Which standard specifically addresses security controls for cloud service providers?
- ISO 27001
- ISO 27017 (Correct answer)
- NIST SP 800-53
- PCI DSS
Correct answer: ISO 27017
ISO 27017 provides cloud-specific security controls and guidance extending ISO 27001 for cloud environments.
Question 6: What is a key security risk unique to multi-tenant cloud environments?
- Lack of encryption
- VM escape or tenant isolation failure (Correct answer)
- Absence of firewalls
- No access logging
Correct answer: VM escape or tenant isolation failure
VM escape allows an attacker to break out of a virtual machine and access the hypervisor or other tenants' data.
CISSP CISSP Cloud Security 1
Which cloud deployment model provides exclusive infrastructure for a single organization?