ISC2 CCSP domains: cloud concepts, data security, platform and infrastructure, application security, operations and legal compliance.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What are the five essential characteristics of cloud computing according to NIST?
Show answer
On-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service- Define Infrastructure as a Service (IaaS) in cloud computing
Show answer
A cloud service that provides virtualized computing resources over the internet, including servers, storage, and networking- What is the primary difference between public and private cloud deployment?
Show answer
Public cloud is shared among multiple organizations and managed by a provider; private cloud is dedicated to a single organization- In the cloud shared responsibility model, who is responsible for physical data center security?
Show answer
The cloud service provider (CSP)- What is a hybrid cloud environment?
Show answer
A combination of private and public cloud resources that are integrated to allow workloads to move between them- Name three key benefits of cloud computing for organizations
Show answer
Cost efficiency, scalability, flexibility, reduced capital expenditure, and increased accessibility- What is Platform as a Service (PaaS)?
Show answer
A cloud service that provides a platform and development environment for building applications without managing underlying infrastructure- Define Software as a Service (SaaS)
Show answer
A cloud service model where applications are delivered over the internet on a subscription basis, with the provider managing all infrastructure and updates- What are the three main levels of data classification?
Show answer
Public, internal/confidential, and restricted/highly confidential, based on sensitivity and impact of unauthorized disclosure- Define data residency in cloud computing
Show answer
The requirement that certain data must be stored and processed only within specific geographic locations for legal or compliance reasons- What is the difference between encryption at rest and encryption in transit?
Show answer
Encryption at rest protects stored data; encryption in transit protects data being transmitted over networks- What is a Hardware Security Module (HSM) used for in cloud environments?
Show answer
A dedicated device that generates, stores, and manages cryptographic keys for encrypting and decrypting sensitive data- Define Data Loss Prevention (DLP)
Show answer
Security controls that identify, monitor, and restrict the movement of sensitive data to prevent unauthorized disclosure or theft- What is the primary purpose of a key management service (KMS) in cloud?
Show answer
To centrally manage the creation, rotation, and deletion of encryption keys used to protect cloud data- Name three major privacy regulations affecting cloud data security
Show answer
GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), and HIPAA (Health Insurance Portability and Accountability Act)
FlashKeepers