3.3 Design Architecture for Development and Production Tenant Scenarios and Their Associated Impacts SECURITY-OPERATIONS-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A healthcare organization is deploying a security operations platform. They must comply with HIPAA, which requires that production data be protected and access logged. They also have a strict policy that development must not use real patient data. The development team wants to test detection rules with realistic data. Which architecture best satisfies all requirements?

   • AUse separate tenants but replicate a subset of production data into development after de-identification.
   • BUse a single tenant with data masking for development users.
   • CUse separate tenants, with production using real data and development using synthetic data that mimics patient data patterns.
   • DUse a single tenant with strict RBAC to limit development access to production data.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An organization uses a development tenant to test new detection rules. They want to promote a rule to production only after it has passed automated tests and been reviewed by a senior security engineer. Which deployment pipeline design best meets this requirement?

   • AAllow developers to manually copy the rule to production after testing.
   • BUse a pipeline that runs automated tests, then requires manual approval from a senior engineer before deploying to production.
   • CAutomatically deploy all changes from development to production after tests pass.
   • DDeploy the rule to production immediately after it is created in development.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a cost implication of maintaining separate development and production tenants?

   • AIt reduces costs because development can be run on the same hardware as production
   • BIt doubles the cost of all resources because both tenants must be identical in size
   • CIt incurs additional costs for duplicated infrastructure and management overhead
   • DIt eliminates the need for any licensing costs
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the final step in the lifecycle of a decommissioned development tenant?

   • AImmediately deleting the tenant without any data retention
   • BReassigning the tenant to another team for continued use
   • CArchiving configuration backups and audit logs before deleting the tenant
   • DPromoting all development configurations to production before deletion
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a common failover mechanism used in tenant architecture to support business continuity?

   • AStoring all backups on the same physical server as the primary tenant
   • BDisabling all access to the tenant during a disaster
   • CReplicating data and services to a secondary region or availability zone
   • DUsing a single point of failure for simplicity
   Reveal Solution Discussion Select an answer first