Cloud Concepts, Architecture, and Design →mediumMultiple SelectObjective-mapped

CCSP Cloud Concepts, Architecture, and Design Practice Question

A cloud architect is designing a multi-tenant SaaS application. Which THREE of the following are essential isolation mechanisms that must be implemented to ensure tenant separation?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Data storage isolation (e.g., separate schemas or encryption per tenant)

Multi-tenancy isolation requires separation at the hypervisor, data storage, and network levels to prevent one tenant from accessing another's resources.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Data storage isolation (e.g., separate schemas or encryption per tenant)
Why this is correct
Correct. Data isolation ensures tenant data separation.
✓
Hypervisor isolation
Why this is correct
Correct. Hypervisor provides virtual machine isolation.
✗
Shared database for all tenants
Why it's wrong here
Shared database without isolation is a risk; data isolation is needed.
✓
Network isolation via VLANs or SDN
Why this is correct
Correct. Network isolation prevents cross-tenant traffic.
✗
Single sign-on (SSO) for all tenants
Why it's wrong here
SSO is an access feature, not an isolation mechanism.

Go deeper

CCSP Cloud Concepts, Architecture, and Design Practice Question

Why each option matters

Option-by-option breakdown

Related to this question