nerdexam
CSA

CCSK · Question #243

The most fundamental security control for any multitenant network is?

The correct answer is B. Segregation and isolation of network traffic. In a multitenant network, segregating and isolating traffic between tenants is the foundational control that prevents unauthorized cross-tenant data exposure.

Cloud Platform and Infrastructure Security

Question

The most fundamental security control for any multitenant network is?

Options

  • AHypervisor security
  • BSegregation and isolation of network traffic
  • CLogging and monitoring controls
  • DSecure image creation process

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    82% (23)
  • C
    4% (1)
  • D
    11% (3)

Why each option

In a multitenant network, segregating and isolating traffic between tenants is the foundational control that prevents unauthorized cross-tenant data exposure.

AHypervisor security

Hypervisor security is important for protecting virtual machines but operates below the network layer and does not address the primary risk of cross-tenant traffic exposure.

BSegregation and isolation of network trafficCorrect

In multitenant environments, multiple organizations share the same physical and logical infrastructure, making network segregation and isolation the most critical baseline control. Without it, one tenant's traffic could be exposed to another, enabling data breaches or lateral movement across tenant boundaries. All other security controls in a multitenant model depend on this foundational isolation being in place first.

CLogging and monitoring controls

Logging and monitoring are detective controls that identify issues after the fact and do not prevent cross-tenant data leakage, which is the defining risk in multitenant networks.

DSecure image creation process

Secure image creation protects the integrity of VM or container templates but does not address the risk of traffic leakage between tenants sharing the same network infrastructure.

Concept tested: Multitenant network segregation and isolation

Source: https://cloudsecurityalliance.org/research/guidance/

Topics

#multitenant network#network segregation#traffic isolation#network security

Community Discussion

No community discussion yet for this question.

Full CCSK Practice