Evaluate and Select Reusable Technologies CSSLP Practice Questions (Page 8)

Questions 36–36

1. 36expert · hard

   A database administrator is tasked with securing a multi-tenant application database. Each tenant must only see its own rows, and the application uses a single database user. The security team also wants to ensure that database connections are encrypted and that the application cannot access the database directly from the internet. Which combination of controls should be implemented?

   • AEncrypt the entire database and rely on the application to filter tenant data
   • BUse row-level security (RLS) with a tenant ID filter, enforce TLS for connections, and place the database behind a private network with no public endpoint
   • CUse a reverse proxy to filter tenant data and allow direct database access from the internet
   • DCreate a separate database user for each tenant and grant them access to their own tables
   Reveal Solution Discussion Select an answer first