ISC2 Certified Cloud Security Professional (CCSP) Practice Question
A cloud provider runs an OpenStack environment on a fleet of KVM hypervisors. The operations team must meet these service requirements:
A failed compute host has to be redeployed, including all hypervisor and virtual network settings, within 30 minutes.
Tenant virtual machines must be protected with crash-consistent backups by default and support application-consistent snapshots, all without installing backup agents inside the guests. Which approach BEST satisfies both host and guest operating-system backup and restore requirements while keeping day-to-day administration effort low?
PXE booting compute nodes and applying automated configuration-management playbooks, while using hypervisor-level quiesced snapshots replicated to object storage for VM protection
Nightly file-level backups of /etc on each hypervisor combined with tenant-installed backup agents inside every VM
Guest-side scripts that copy critical files to a shared NFS location and manual hypervisor rebuilds from installation media after failures
RAID-1 mirroring of each host's system disk for redundancy and continuous data protection agents deployed inside all tenant VMs
Re-provisioning compute hosts by network (PXE) boot and automatically applying configuration management code (e.g., Ansible, Puppet, Chef) lets the provider recreate the hypervisor OS and its settings in minutes, meeting the 30-minute RTO. For guest VMs, hypervisor-level snapshots that invoke guest-quiescing through tools such as QEMU Guest Agent or VMware Tools create file-system/application-consistent images without any in-guest backup agents; exporting those snapshots to object storage enables efficient, agentless recovery. The other choices fail to meet one or both requirements: merely backing up /etc is insufficient for rapid host rebuilds and still requires guest agents; manual OS reinstalls from media exceed the RTO; relying on local RAID protects disks, not configurations, and CDP agents contradict the "no in-guest agent" mandate.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does PXE booting mean, and how does it help in this solution?
Open an interactive chat with Bash
What are hypervisor-level snapshots and how do they ensure crash-consistent or application-consistent backups?
Open an interactive chat with Bash
Why is storing snapshots in object storage important for VM protection?
Open an interactive chat with Bash
ISC2 Certified Cloud Security Professional (CCSP)
Cloud Security Operations
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .