Crucial Exams

ISC2 Certified Cloud Security Professional (CCSP) Practice Question

During a security assessment of a public IaaS provider, you learn that customer virtual machines are routinely migrated off a host and the vacated blocks on a thin-provisioned shared SAN are re-allocated to other tenants within minutes. The provider confirms that it does not perform cryptographic erasure or zero-fill deleted virtual disks before reuse. Which risk should you rate as having the greatest likelihood and impact for your organization?

  • Compromise of management plane APIs by a malicious insider

  • Data remanence exposing residual information on shared storage after virtual disk deletion

  • Denial-of-service from a noisy neighbor exhausting host resources

  • Hypervisor escape allowing a malicious VM to compromise co-resident guests

ISC2 Certified Cloud Security Professional (CCSP)
Cloud Platform & Infrastructure Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot