Study book
430-page PDF, mapped to the six ISC2 domains.
Sectutor · CCSP Kit
CCSP study guide PDF and 600 practice questions
Study the CCSP exam from a 430-page PDF and a 600-question offline bank, mapped to the ISC2 outline dated 1 August 2026. The download starts after payment.
$49 USD. Instant download after payment. Buy opens Stripe Checkout. This page does not set the amount.
Who it is for
For people preparing for the CCSP exam who want a downloadable study book and an offline question bank, rather than a video course.
What’s included
The CCSP Kit is the study book and the question bank. It does not include the slide deck, videos, classes, or labs.
Question bank
600 questions, delivered as an offline HTML app. Unzip it and open index.html. No server.
Videos, classes, labs, and an exam voucher are not included. The CCSP Kit does not include the slide deck. All sales of digital products are final.
The licence for this product is on its licence page. Checkout links to that page.
Exam domains
Mapped to the ISC2 CCSP exam outline, page dated 1 August 2026. These are the public domain names and objective titles. Sectutor did not write the outline.
Domain 1 · 17%
Cloud Concepts, Architecture and Design
- Understand cloud computing concepts
- Describe cloud reference architecture
- Understand security concepts relevant to cloud computing
- Understand design principles of secure cloud computing
- Evaluate Cloud Service Providers (CSP)
- Comprehend Artificial Intelligence (AI) and Machine Learning (ML)
Domain 2 · 20%
Cloud Data Security
- Describe cloud data concepts
- Design and implement cloud data storage architectures
- Design and apply data security technologies and strategies
- Implement data discovery
- Plan and implement data classification
- Design and implement Information Rights Management (IRM)
- Plan and implement data retention, deletion and archiving policies
- Design and implement auditability, traceability and accountability of data events
- Comprehend data protection of Artificial Intelligence (AI) and Machine Learning (ML) data
Domain 3 · 17%
Cloud Platform & Infrastructure Security
- Comprehend cloud infrastructure components
- Design a secure data center
- Analyze risks associated with cloud infrastructure and platforms
- Plan and implementation of security controls
- Plan business continuity (BC) and disaster recovery (DR)
Domain 4 · 16%
Cloud Application Security
- Advocate training and awareness for application security
- Describe the Secure Software Development Life Cycle (SDLC) process
- Apply the Secure Software Development Life Cycle (SDLC)
- Apply cloud software assurance and validation
- Use verified secure software
- Comprehend and apply the specifics of cloud application architecture
- Design appropriate Identity and Access Management (IAM) solutions
Domain 5 · 17%
Cloud Security Operations
- Build and implement physical and logical infrastructure for a cloud environment
- Operate and maintain physical and logical infrastructure for a cloud environment
- Implement operational controls and standards (for example NIST, ISO, HIPAA, COBIT, CIS Controls, COSO, ITIL and ISO/IEC 20000-1)
- Support digital forensics
- Manage communication with relevant parties
- Manage security operations
Domain 6 · 13%
Legal, Risk and Compliance
- Articulate legal requirements and unique risks within the cloud environment
- Understand privacy requirements
- Understand audit processes, methodologies and required adaptations for a cloud environment
- Understand implications of cloud to enterprise risk management
- Understand outsourcing and cloud contract design
Source: ISC2 CCSP exam outline, page dated 1 August 2026. Objective titles 3.1, 6.2 and 6.3 follow ISC2’s 2026 PDF outline, which differs from the wording still shown on that HTML page.
Three free sample questions
These are from the free 30-question sample, with the answer under each one. They are original practice items, not recalled exam content. The paid kit is the full 600-question bank.
Per NIST SP 500-292, which actor provides the physical network and compute infrastructure hosting the VMs?
- Cloud consumer
- Cloud provider
- Cloud broker
- Cloud auditor
Answer: Cloud provider
The cloud provider provides the physical resources -- servers, networks, storage -- that deliver cloud services.
A healthcare organization is migrating its electronic health records (EHR) to a cloud environment. The security team must assign sensitivity labels to datasets before migration. Which of the following is the PRIMARY purpose of implementing a data classification scheme in this context?
- To reduce storage costs by compressing sensitive data
- To apply appropriate security controls based on data sensitivity
- To ensure all data is encrypted at rest automatically
- To comply with data retention requirements for audit logs
Answer: To apply appropriate security controls based on data sensitivity
Data classification assigns labels so organizations can apply proportional security controls based on the sensitivity and criticality of each dataset. It is the foundational step that drives encryption, access control, DLP, and retention decisions.
A cloud provider is designing a new data center that must support basic capacity with a single non-redundant distribution path and an expected uptime of approximately 99.671%. The provider has a moderate budget and plans to use this facility for non-critical workloads. According to the Uptime Institute classification, which data center tier best describes this target design?
- Tier I
- Tier II
- Tier III
- Tier IV
Answer: Tier I
Tier I data centers provide basic capacity with a single non-redundant distribution path and no redundant components, achieving approximately 99.671% uptime (about 28.8 hours of downtime per year). They are the most economical option suitable for non-critical workloads and development environments.
Free samples
Browse free samples
A free chapter and a 30-question sample of the 600-question bank are on this site. The paid kit is the full book and the full bank. The slide deck is a separate product. Nothing here is locked behind an email address.
Sample chapter
A chapter from the course book. The reader shows the PDF pages themselves.
Loading CCSP sample chapter. Download the PDF if the reader does not start.
Loading CCSP sample chapter
Try the question bank
A free sample of the CCSP bank: 30 questions, five in each of the six domains. The full bank has 600 questions across all 6 domains. Unzip it and open index.html. This copy runs here, with no server, and keeps progress in this browser only.
Direct download
Free downloads. No form, no account, and no email. These are the public samples, not the paid files. The question bank zip is the same sample app.
Questions before you buy
Is the exam voucher included?
No. You register and pay for the exam with ISC2 yourself.
Does the CCSP Kit include the slide deck?
No. The CCSP Kit does not include the slide deck. The deck is a separate product.
Do you guarantee a pass, or publish a pass rate?
No. Studying this kit does not guarantee a pass, and Sectutor does not publish a pass rate.
Can I withdraw from an order?
No. All sales of digital products are final. Checkout asks you to agree to immediate access and to acknowledge that you lose the right of withdrawal. If a file is defective or was not delivered, contact support and we will fix, replace or refund it. Read the refunds page before you buy.
What happens when the exam outline changes?
Each edition will name the outline it was written against. The update policy for later editions is not set yet and will be published here before launch.
Sectutor is not affiliated with, endorsed by, or sponsored by ISC2. CCSP is a trademark of its owner.