CCSP Domain 1: Cloud Concepts, Architecture and Design
Domain 1.0: Cloud Concepts, Architecture and Design · 17% of the exam
The foundation the whole certification rests on: all six objectives (1.1–1.6), from the NIST SP 800-145 and ISO/IEC 17788 definitions and the roles in a cloud arrangement, through the reference architecture and its deployment models, the security concepts cloud changes, the design principles that make a deployment defensible, evaluating a provider against criteria you set first, and the artificial intelligence objective new in the 2026 outline.
All study guides, current and every new one.
- Interactive online guide
- Downloadable PDF
- Lifetime updates
- 30-day money-back guarantee
Secure checkout via Stripe · no account needed · instant access
17% of your exam score
Domain 1.0 is worth 17% of the CCSP exam. Walk in having mastered it, not hoping it doesn't come up.
Every objective, nothing extra
Built line by line from the official ISC2 CCSP objectives 1.1–1.6: 31 in-depth topics with worked scenarios and exam tips, in a 106-page guide you'll actually finish.
60 exam-style questions
Every question comes with instant feedback and a full explanation, so a wrong answer teaches you as much as a right one.
The cloud credential, freshly rewritten
CCSP is the vendor-neutral cloud security certification, and the outline effective 1 August 2026 is brand new, with two AI objectives no incumbent book on the shelf covers.
Serving, transitioning, or a military spouse?
CCSP appears in the DoD 8140 qualification matrix. See how it maps to work roles, which credentialing program your branch runs, and what it will and will not pay for. Read the DoD 8140 guide →
Read a real excerpt, free
This is the actual opening of Module 1.1, Cloud computing concepts, not marketing copy. If you like how it teaches, the rest of the guide reads the same way.
Understand cloud computing concepts
Definitions from ISO/IEC 17788 and NIST SP 800-145, the roles in a cloud arrangement, the essential characteristics, and the building-block technologies underneath.
Aneta Kowalczyk joined Cobalt Grocery Group as principal cloud architect three weeks before the board approved a programme with an unhelpfully confident name: Everything to Cloud by 2028. Cobalt runs 1,400 stores across nine European countries, a distribution network that moves perishable stock on four-hour margins, and a loyalty scheme with 31 million members. The board's slide said the migration would “transfer our security burden to the hyperscalers.”
Aneta's first act was to ask the programme director what the word cloud meant in that sentence. The answer — “servers we don't own” — is the answer most people give, and it is the reason so many cloud programmes make expensive mistakes in their first year. It is also, almost word for word, a distractor you will see on this exam.
CCSP questions are frequently decided on whether you know a definition exactly. “Servers you don't own” describes colocation, managed hosting and outsourcing just as well as it describes cloud. The distinguishing features are the essential characteristics. When a scenario asks whether something “qualifies as cloud computing”, walk the characteristics list and find the one that is absent.
The two definitions ISC2 works from
Two documents matter. NIST SP 800-145, The NIST Definition of Cloud Computing, is three pages long and defines cloud as a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction. ISO/IEC 17788 (identical to ITU-T Y.3500) gives the vocabulary and the role model, and is where the formal role names in the outline come from.
They agree almost entirely. Where they differ, the differences are worth knowing: NIST lists five essential characteristics, ISO/IEC 17788 lists six by adding multi-tenancy; NIST lists three service models, ISO/IEC allows a broader set of “cloud capability types”. The ISC2 outline names multi-tenancy alongside the NIST five, so treat the list as six for study purposes.
Essential characteristics
| Characteristic | What it means | Why it matters to security |
|---|---|---|
| On-demand self-service | The consumer provisions capability unilaterally, without human interaction with the provider. | Removes the procurement gate that used to catch unapproved systems. Shadow IT becomes a swipe of a corporate card. |
| Broad network access | Capabilities are available over the network through standard mechanisms, on heterogeneous client platforms. | The perimeter stops being a location. Identity becomes the control point. |
| Resource pooling | Provider resources serve multiple consumers with physical and virtual resources dynamically assigned; the consumer generally has no control or knowledge of exact location. | Creates multi-tenancy risk and the data-residency problem in one stroke. |
| Rapid elasticity and scalability | Capabilities can be elastically provisioned and released, in some cases automatically, appearing unlimited to the consumer. | Attack surface changes minute to minute. Asset inventories built on a quarterly scan are fiction. |
| Measured service | Resource use is metered, controlled and reported, providing transparency to both parties. | The billing record is a security telemetry source — and cost anomalies are a genuine detection signal for cryptomining. |
| Multi-tenancy | Multiple unrelated consumers share the same physical and logical resources, isolated by the provider's controls. | Isolation failure is the risk unique to cloud. It is why hypervisor and container escape matter so much here. |
Not ready to buy? Read it later.
We'll email you a free sample of this guide as a PDF, no purchase needed.
Try 3 sample questions
Pulled straight from the guide's 60-question bank. Tap an answer for instant feedback and the explanation.
From module 1.1 · Cloud computing concepts
1. A logistics company runs a virtualized datacentre with a self-service request portal. Capacity is fixed per rack, and there is no per-consumer metering of resource use. Which essential characteristics are absent?
From module 1.2 · The cloud reference architecture
1. Five hospitals jointly fund and govern a cloud platform used only by them, built around a common regulatory regime. Which deployment model is this?
From module 1.3 · Security concepts for cloud computing
1. A customer must be able to render cloud-hosted data unrecoverable even by the provider, on demand. Which key custody model supports this?
57 more questions like these are waiting inside.
What's inside
- 31 published sub-topics across 6 modules, mapped to objectives 1.1–1.6
- 60 exam-style practice questions with instant feedback
- Full answer key explaining why every distractor is wrong
- The six essential characteristics, and how to spot what is missing
- The key-custody hierarchy that decides most encryption questions
- Complete CCSP acronym & key-term reference
- 106-page downloadable PDF for offline study and printing
- Lifetime updates as the exam evolves
The modules, mapped to the objectives
- 1.110 Qs
Cloud computing concepts
Understand cloud computing concepts
Cloud service customer (CSC)Cloud service provider (CSP)Cloud service brokerEssential characteristicsMulti-tenancyResource pooling - 1.210 Qs
The cloud reference architecture
Describe cloud reference architecture
Cloud capability typesService categories (SaaS/PaaS/IaaS)Deployment modelsCommunity cloudReversibilityConfidential computing - 1.310 Qs
Security concepts for cloud computing
Understand security concepts relevant to cloud computing
Key custody (BYOK/HYOK)Crypto-shreddingJust-in-time privilegeNetwork security groupsContainer escapeImmutable infrastructure - 1.410 Qs
Design principles of secure cloud computing
Understand design principles of secure cloud computing
Cloud secure data lifecycleRTO, RPO and RSLBusiness impact analysisVendor lock-inWell-Architected FrameworkDevSecOps - 1.510 Qs
Evaluating cloud service providers
Evaluate Cloud Service Providers (CSP)
Verification against criteriaSOC 2 Type I vs Type IIISO/IEC 27017 and 27018CSA STARCommon Criteria and EALFIPS 140-2 / 140-3 - 1.610 Qs
Artificial intelligence and machine learning
Comprehend Artificial Intelligence (AI)/Machine Learning (ML)
Threat detection & analysisData source validationSOARModel driftHuman-in-the-loopEU AI Act risk tiers
About the author
Chris Rees
Professional information technologist with 25+ years in IT and the author of 51 certification training courses, 50+ live on Pluralsight, rated 4.6/5 across more than 2,000 reviews. This guide is that same exam-focused teaching, in a format you can finish.
More about ChrisSitting the whole exam? Get the Complete CCSP Collection.
Every domain of the exam, including this guide, for $99, one time.
See everything insideQuestions, answered
Do I need an account to buy?
No. Checkout is a single Stripe form: email and card, about 30 seconds. We create your access from your checkout email automatically and sign you in the moment payment completes.
Is this up to date with the real CCSP exam?
Yes. The guide is mapped module-by-module to the official ISC2 CCSP objectives (1.1–1.6), and lifetime updates are included, so as the exam evolves your guide does too.
What exactly do I get?
Instant access to the interactive online guide with all 60 practice questions, plus a 106-page PDF you can download, print, and keep forever.
Do I need the other domains too?
This guide covers Domain 1.0 (17% of the exam). To prepare for the whole exam, the Complete CCSP Collection bundles all 6 domains for $99, less than the price of three guides.
What if it isn't for me?
Every purchase comes with a 30-day money-back guarantee. Email us and we'll refund you, no hoops.
Who wrote it?
Chris Rees, a professional information technologist with 25+ years in IT and the author of 51 certification courses published on Pluralsight, rated 4.6/5 across 2,007 ratings.
Be ready for 17% of the exam, for $24.95
Instant access, lifetime updates, and a 30-day money-back guarantee. The only risk is walking into the exam without it.
Get the guide