Crucial Exams

ISC2 Certified Cloud Security Professional (CCSP) Practice Question

During a security assessment you learn that every cloud administrator in your organization uses the same long-lived API access key, which is configured with full management-plane permissions across all projects. The CIO asks you to recommend the FIRST control to reduce the likelihood and blast radius of a management-plane credential compromise while still allowing administrators to perform their duties. Which action meets this goal?

  • Install host-based intrusion detection agents on every virtual machine in each project.

  • Replace the shared key with individual administrator identities assigned least-privilege roles via the provider's IAM/RBAC service.

  • Enable server-side encryption on all object storage buckets used by the projects.

  • Restrict the cloud provider's API endpoint to a private IP range reachable only through a site-to-site VPN.

ISC2 Certified Cloud Security Professional (CCSP)
Cloud Platform & Infrastructure Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot