What security best practices should be followed when managing tenants in Morpheus? (Select two.)

Question

Options

• AImplement RBAC for tenant access management
• BEnable logging and auditing for tenant activities
• CAllow tenants unrestricted access to all cloud resources
• DDisable security policies for single-tenant deployments

• A
  81% (22)
• C
  7% (2)
• D
  11% (3)

Explanation

RBAC (A) ensures users only access resources appropriate to their role, preventing privilege escalation and unauthorized cross-tenant access - a foundational zero-trust principle. Logging and auditing (B) creates an accountability trail that enables threat detection, incident response, and compliance reporting for tenant activities.

C is wrong because unrestricted resource access violates the principle of least privilege and creates serious security and cost exposure across tenants. D is wrong because single-tenant deployments still require security policies - isolation doesn't eliminate threats like misconfiguration, insider risk, or compromised credentials.

Memory tip: Think "RAIL" - RBAC controls Access, Auditing tracks Actions. The two wrong answers both follow the pattern of removing security controls, which should always be a red flag in security questions.

No community discussion yet for this question.