nerdexam
(ISC)2

CCSP · Question #137

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, what aspect of managed cloud services

The correct answer is B. Multitenancy. The multitenancy aspect of managed cloud services amplifies the threat of malicious insiders by increasing the potential scope of impact.

Submitted by certguy· Apr 18, 2026Cloud Concepts, Architecture and Design

Question

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, what aspect of managed cloud services makes the threat of malicious insiders so alarming?

Options

  • AScalability
  • BMultitenancy
  • CMetered service
  • DFlexibility

How the community answered

(14 responses)
  • B
    93% (13)
  • C
    7% (1)

Why each option

The multitenancy aspect of managed cloud services amplifies the threat of malicious insiders by increasing the potential scope of impact.

AScalability

Scalability refers to the ability to expand resources, which doesn't directly exacerbate the malicious insider threat more than other factors.

BMultitenancyCorrect

Multitenancy, where multiple customer organizations share the same underlying physical infrastructure and often logical resources (like hypervisors or storage systems), makes the threat of malicious insiders (e.g., cloud provider employees) particularly alarming. A malicious insider with elevated access in a multitenant environment could potentially access or compromise data belonging to numerous customers.

CMetered service

Metered service refers to pay-per-use billing, which is an economic model, not a security vulnerability increasing insider risk.

DFlexibility

Flexibility refers to the adaptability of cloud resources, which is a benefit, not a factor increasing insider threat severity.

Concept tested: Cloud security threats; Multitenancy risks

Source: https://cloudsecurityalliance.org/research/top-threats/

Topics

#Multitenancy#Malicious Insider Threat#Cloud Security Risks#CSA Notorious Nine

Community Discussion

No community discussion yet for this question.

Full CCSP Practice