Design a Multi-Tenant Solution Using the ECS Isolation Features ECS-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary role of a namespace in a multi-tenant ECS design?

   • ATo define the physical storage location of objects
   • BTo provide a logical isolation boundary for a tenant's data and access
   • CTo provide a global DNS name for the ECS cluster
   • DTo manage the replication factor for objects
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A cloud storage provider offers ECS-based object storage to multiple tenants. One tenant, a backup service, frequently writes large amounts of data and has occasionally exhausted the storage pool, causing performance degradation for other tenants. The provider wants to prevent any single tenant from consuming more than 20% of the total storage capacity and also wants to track usage per tenant for billing. What should the provider configure?

   • AEnable Object Lock on all buckets to prevent deletion of data, thereby limiting storage growth.
   • BSet a storage quota of 20% of total capacity for each tenant and enable usage monitoring per tenant.
   • CCreate a separate namespace for each tenant and rely on namespace-level access controls.
   • DSet a bucket policy that limits the size of each object to 20% of total capacity.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A financial services company uses ECS to store archived transaction records for multiple internal departments. Each department is a tenant. Regulatory requirements mandate that transaction records cannot be modified or deleted for seven years. The company also wants to ensure that even the tenant administrator cannot bypass this requirement. What should the ECS administrator configure?

   • AUse ACLs to grant read-only access to all users in each tenant.
   • BSet a bucket policy that denies delete permissions for all users in each tenant.
   • CConfigure a storage quota for each tenant to limit the amount of data stored.
   • DEnable Object Lock on each tenant's buckets and set a retention policy of seven years.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary benefit of using groups in ECS for access control?

   • AThey automatically replicate data across namespaces
   • BThey allow you to assign permissions to a collection of users at once
   • CThey increase the storage quota for the users in the group
   • DThey provide encryption for data stored by the group members
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the role of key management in ECS encryption?

   • ATo set the retention period for encrypted objects
   • BTo define which users can access the data
   • CTo replicate encrypted data to another site
   • DTo securely store and manage the encryption keys used to encrypt and decrypt data
   Reveal Solution Discussion Select an answer first