Design a Multi-Tenant Solution Using the ECS Isolation Features ECS-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A hospital network uses ECS to store patient records for multiple clinics. Each clinic is a tenant. The security team requires that patient data be encrypted at rest using a key that is unique to each clinic, and that all access to patient data be logged for compliance. What should the administrator implement?

   • AUse bucket policies to restrict access to each clinic's data.
   • BCreate a separate namespace for each clinic and rely on namespace isolation.
   • CEnable per-tenant encryption keys and enable auditing for all data access.
   • DEnable Object Lock on all buckets to protect data from modification.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A financial institution uses ECS to store transaction data for multiple subsidiaries. Each subsidiary is a tenant. The institution requires that each subsidiary's data be encrypted with a unique key, and that all access to the data be logged for compliance. Additionally, the institution wants to ensure that if one subsidiary's key is compromised, the other subsidiaries' data remains protected. What is the most appropriate design?

   • AEnable Object Lock on all buckets to protect data from modification.
   • BCreate a separate namespace for each subsidiary and rely on namespace isolation.
   • CUse per-tenant encryption keys and enable auditing for all data access.
   • DUse a single encryption key for all subsidiaries and enable auditing.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A government agency uses ECS to store sensitive citizen data. The agency must ensure that data is encrypted at rest and that each department (tenant) has its own encryption key. Additionally, the agency wants to ensure that data is encrypted in transit between clients and ECS. What should the ECS administrator implement?

   • AEnable Object Lock on all buckets to protect data from unauthorized access.
   • BUse bucket policies to restrict access to each tenant's data.
   • CEnable client-side encryption and use the same key for all tenants.
   • DEnable server-side encryption with a per-tenant key and require HTTPS for all client connections.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   When designing a multi-tenant solution, what is a recommended practice for namespace structure?

   • AUse one namespace for all tenants and use object lock to prevent access
   • BCreate a separate namespace for each tenant to ensure logical isolation
   • CCreate namespaces based on the physical location of the data
   • DUse a single namespace for all tenants and rely on bucket policies for isolation
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of Object Lock in Dell ECS?

   • ATo prevent objects from being deleted or modified for a specified retention period
   • BTo encrypt objects at rest using customer-provided keys
   • CTo control which users can read objects in a bucket
   • DTo automatically replicate objects to another namespace
   Reveal Solution Discussion Select an answer first