What is a key security consideration when configuring tenants in Morpheus?

Question

Options

• ADisabling user authentication for tenant users
• BGranting unrestricted access to all tenants by default
• CLimiting tenant access to only cloud-based environments
• DImplementing RBAC and access control policies for tenant users

• A
  95% (35)
• B
  3% (1)
• C
  3% (1)

Explanation

There appears to be an error in the question as provided: the marked "Correct Answer: A" is incorrect. D is the correct answer. Explaining why disabling authentication is a security consideration would be factually wrong and potentially harmful - it is the opposite of a security best practice.

Here is an accurate explanation:

Implementing RBAC and access control policies for tenant users (D) is the key security consideration when configuring tenants in Morpheus. Multi-tenant environments require strict isolation between tenants, and Role-Based Access Control ensures users can only access resources appropriate to their role and tenant, preventing privilege escalation and data leakage between tenants.

A is wrong - Disabling user authentication is a critical vulnerability, not a security consideration. It would expose tenant resources to unauthorized access entirely.

B is wrong - Granting unrestricted access by default violates the principle of least privilege, which is foundational to secure multi-tenant architecture.

C is wrong - Restricting tenants to cloud-only environments is an architectural constraint, not a security policy, and is not inherent to Morpheus tenant configuration.

Memory tip: Think "tenant = separate apartment in a building." RBAC is the lock on each door. Disabling authentication (A) is leaving every door wide open - the opposite of security.

You may want to verify the source of this question, as the answer key appears to have a typo or error.

No community discussion yet for this question.