3.3 Design Architecture for Development and Production Tenant Scenarios and Their Associated Impacts SECURITY-OPERATIONS-ARCHITECT Practice Questions (Page 7)

Questions 31–33

1. 31application · medium

   A financial services company is adopting a multi-tenant security operations platform. The compliance team requires that production security data never be accessible from the development environment, and that only senior analysts can view production incident details. The development team needs to test new detection rules against realistic data. Which architecture best meets these requirements?

   • AUse separate tenants for development and production, with production data access restricted to senior analysts via RBAC, and use synthetic data in development.
   • BUse a single tenant with role-based access control to restrict production data access to senior analysts.
   • CUse a single tenant with separate logging and monitoring for development and production activities.
   • DUse separate tenants but replicate production data into development for realistic testing, with access restricted to senior analysts.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company is designing a multi-tenant security operations platform. They have a limited budget and want to minimize costs while ensuring that production performance is not impacted by development activities. They also need to run occasional performance tests that require significant resources. What is the best approach?

   • AUse a single tenant for both development and production to save costs.
   • BUse a production-sized development tenant at all times to be ready for performance tests.
   • CUse a smaller development tenant for routine work and scale it up temporarily for performance tests.
   • DRun performance tests in the production tenant during off-peak hours.
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   What is the primary architectural reason for maintaining separate development and production tenants in a security operations platform?

   • ATo enable direct sharing of live production data with developers for realistic testing
   • BTo reduce the total number of licenses required across the organization
   • CTo isolate resources, data, and policies so that changes in development do not affect production operations
   • DTo allow developers to manage production security policies directly
   Reveal Solution Discussion Select an answer first