3.3 Design Architecture for Development and Production Tenant Scenarios and Their Associated Impacts SECURITY-OPERATIONS-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A startup is designing a security operations platform with separate development and production tenants. They have limited budget and want to minimize costs while ensuring production performance is not impacted by development activities. What is the best approach?

   • AUse the same size tenant for both environments to simplify capacity planning.
   • BUse a smaller, lower-cost tenant for development and a larger, production-grade tenant for production.
   • CShut down the production tenant during development to save costs.
   • DUse a single tenant for both development and production to save costs.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has a development tenant and a production tenant. They want to implement a deployment pipeline that promotes configuration changes from development to production. The pipeline must include automated testing, manual approval, and the ability to roll back changes if issues are found after deployment. Which design best meets these requirements?

   • AA pipeline that requires manual approval before tests are run, and then deploys automatically.
   • BA pipeline that deploys changes directly to production without testing, relying on rollback if issues occur.
   • CA pipeline that runs automated tests, then requires approval from a designated approver, and stores previous configurations for rollback.
   • DA pipeline that automatically deploys changes to production after tests pass, with no approval step.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has a development tenant and a production tenant for its security operations platform. The team frequently updates detection rules and wants to promote changes from development to production with minimal risk and clear accountability. What is the best approach?

   • AManually copy configuration files from development to production after testing.
   • BPromote changes automatically to production as soon as they are committed to the repository.
   • CUse a version-controlled deployment pipeline that packages configurations and requires approval before promoting to production.
   • DAllow development administrators to directly modify production configurations when needed.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security operations team is designing a multi-tenant architecture. They want to ensure that a security incident in the development tenant does not affect the production tenant's monitoring and response capabilities. They also want to maintain a centralized view of security events across both tenants for executive reporting. What is the best approach?

   • AUse the production monitoring system to also monitor development, but restrict access.
   • BIsolate the tenants completely and do not share any data, even for reporting.
   • CUse a single monitoring system for both tenants to simplify reporting.
   • DIsolate the tenants' monitoring systems but forward a copy of security events from both tenants to a central reporting system.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In tenant lifecycle management, what is the purpose of versioning configurations before promoting them from development to production?

   • ATo track changes and enable rollback to a known-good state if a promoted configuration causes issues
   • BTo bypass the need for testing configurations in the development tenant
   • CTo ensure that production configurations are identical to development configurations at all times
   • DTo automatically apply configuration changes to production without review
   Reveal Solution Discussion Select an answer first