I85PREP
⌘ K
HSC Enterprise Computing study materials
HSC Enterprise Computing study resources

HSC Enterprise Computing practice questions

One question at a time. Build your HSC Enterprise Computing understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Enterprise computing systems

Which statement best describes an enterprise computing system?

  1. A standalone game engine used only for entertainment software
  2. A large-scale system that supports core organisational processes across many departments Correct answer.
  3. A single-user application installed on one desktop computer
  4. A temporary script used to automate one repetitive personal task

Explanation

Enterprise systems are designed to serve whole organisations, integrating data and processes across departments so that many users share consistent information. Their defining features are scale, integration and support for core business functions rather than individual use.

Question 2Enterprise computing systems

A company wants one integrated database so that sales, finance and warehouse staff all view the same inventory figures. Which system type most directly provides this?

  1. A standalone spreadsheet kept on each manager's laptop
  2. A single-purpose graphics editing suite
  3. An enterprise resource planning system Correct answer.
  4. A local printer driver package

Explanation

An ERP system centralises data in a shared database and links functional modules such as sales, finance and inventory. This gives all departments a single consistent view of the same records.

Question 3Enterprise computing systems

In a three-tier architecture, which component holds the business rules and processes requests from the user interface?

  1. The application (logic) tier Correct answer.
  2. The network cabling
  3. The database tier
  4. The presentation tier

Explanation

The application or logic tier contains the business rules and coordinates requests between the presentation tier and the data tier. Separating these rules from the interface and the database improves maintainability and security.

Question 4Enterprise computing systems

What is the main purpose of a service level agreement (SLA) between an enterprise and a cloud provider?

  1. To guarantee that no system will ever experience an outage
  2. To list the personal hobbies of the provider's technical staff
  3. To define measurable performance and availability commitments and remedies Correct answer.
  4. To transfer ownership of the provider's data centres to the client

Explanation

An SLA formally records measurable commitments such as uptime percentages, response times and support response windows, together with remedies if those targets are missed. It is a contractual performance instrument, not an absolute guarantee.

Question 5Enterprise computing systems

Which practice most directly reduces the impact of a disk failure in an enterprise file server?

  1. Reducing the number of user accounts on the server
  2. Using a RAID configuration that keeps redundant data across disks Correct answer.
  3. Increasing the size of the server's monitor
  4. Storing a single copy of all files on one high-capacity disk

Explanation

RAID configurations that maintain redundancy allow data to remain available when one disk fails, because the information can be reconstructed from the remaining disks. This improves fault tolerance without requiring a full restore from backup.

Question 6Enterprise computing systems

A hospital must keep patient records private while allowing clinicians to access them. Which control combination best supports this?

  1. Role-based access control combined with encryption of stored records Correct answer.
  2. Removing audit logs to save disk space
  3. Giving every employee full administrator rights
  4. Publishing all records on an open web server

Explanation

Role-based access control restricts records to staff whose duties require them, while encryption protects data at rest if storage is compromised. Together they enforce confidentiality while preserving legitimate clinical access.

Question 7Enterprise computing systems

Which characteristic distinguishes a wide area network (WAN) from a local area network (LAN)?

  1. A WAN never uses routers
  2. A WAN only supports wireless connections
  3. A WAN connects devices across large geographic distances using links often leased from carriers Correct answer.
  4. A WAN is always confined to a single room

Explanation

A WAN spans large geographic areas, such as multiple cities or countries, and typically relies on telecommunications carrier links. A LAN covers a limited area such as one building or campus.

Question 8Enterprise computing systems

What does the term 'virtualisation' mean in an enterprise data centre?

  1. Physically removing all servers from the data centre
  2. Running multiple isolated virtual machines on shared physical hardware Correct answer.
  3. Connecting every user directly to a single unshared server
  4. Replacing all software with printed documentation

Explanation

Virtualisation uses a hypervisor to divide physical hardware into multiple isolated virtual machines, each running its own operating system. This improves hardware utilisation and simplifies provisioning.

Question 9Enterprise computing systems

An enterprise wants to compare the total cost of ownership of two vendor proposals over five years. Which approach is most appropriate?

  1. Summing acquisition, licensing, support, training and migration costs over the period Correct answer.
  2. Comparing only the headline purchase price of each proposal
  3. Selecting the vendor whose logo appears most often online
  4. Choosing the proposal with the shortest brochure

Explanation

Total cost of ownership includes all costs incurred across the system's life, not just the initial purchase price. Licensing, support, training and migration can substantially change which option is cheaper overall.

Question 10Enterprise computing systems

A retail chain experiences a sudden surge in online orders each evening. Which design choice best maintains responsiveness during the peak?

  1. Deploying load balancers that distribute requests across multiple application servers Correct answer.
  2. Running all traffic through one fixed server regardless of demand
  3. Disabling monitoring so that alerts are not generated
  4. Storing session data only in the memory of a single server

Explanation

Load balancers spread incoming requests across a pool of servers so that no single machine is overwhelmed during demand peaks. This horizontal scaling preserves response times as traffic grows.

Question 11Enterprise computing systems

A finance team needs guaranteed recovery of transaction data within one hour of a site failure. Which measure most directly addresses this requirement?

  1. Reducing the number of database indexes
  2. Replicating data to a secondary site with automated failover Correct answer.
  3. Scheduling a manual backup once per year
  4. Increasing the screen resolution of workstations

Explanation

Replication to a secondary site with automated failover provides a recent copy of data and a defined mechanism to resume service quickly. This meets a tight recovery time objective far better than infrequent manual backups.

Question 12Enterprise computing systems

An organisation adopts a private cloud for payroll data while using a public cloud for its public website. Which deployment model does this describe?

  1. A peer-to-peer file sharing model
  2. A purely private cloud model
  3. A purely public cloud model
  4. A hybrid cloud model Correct answer.

Explanation

A hybrid cloud combines private and public cloud environments, allowing sensitive workloads to remain private while other workloads use public resources. The described arrangement uses both models together.

Question 13Enterprise computing systems

A payroll system must process every employee record exactly once during a nightly batch. Which requirement does this primarily illustrate?

  1. Cosmetic user interface styling
  2. Reduced monitor brightness
  3. Data integrity and completeness Correct answer.
  4. Increased keyboard layout options

Explanation

Processing every record exactly once is a requirement for data integrity and completeness, ensuring no employee is missed or paid twice. These are correctness requirements rather than presentation concerns.

Question 14Enterprise computing systems

Which is the most appropriate use of an identity management system in a large enterprise?

  1. Removing authentication from internal applications
  2. Publishing staff passwords on a shared intranet page
  3. Allowing each department to invent separate unmanaged credentials
  4. Providing a single sign-on identity with centrally managed permissions Correct answer.

Explanation

Identity management centralises authentication and authorisation so users sign in once and receive permissions based on their role. Central control makes it easier to revoke access promptly when staff leave or change roles.

Question 15Enterprise computing systems

A company wants to monitor whether its online store meets a 99.9 percent monthly availability target. Which practice provides the evidence?

  1. Counting the number of product images uploaded
  2. Collecting uptime metrics and alerting on service outages Correct answer.
  3. Reviewing the store's marketing copy each month
  4. Asking customers to report problems informally

Explanation

Availability targets are verified by continuously measuring uptime and recording outages so that the achieved percentage can be calculated against the target. Automated alerting also shortens detection and response times.

Question 16Enterprise computing systems

Which control best limits the damage if a stolen laptop containing enterprise data is opened by an attacker?

  1. Full-disk encryption with strong authentication Correct answer.
  2. A brighter display panel
  3. A larger hard drive
  4. A longer power cable

Explanation

Full-disk encryption renders stored data unreadable without the correct authentication key, so physical theft does not automatically expose information. Strong authentication prevents trivial bypass of that protection.

Question 17Enterprise computing systems

An enterprise plans to migrate a legacy system. Which activity should occur first to reduce the risk of an unsuccessful migration?

  1. Assessing the existing system's data, dependencies and business processes Correct answer.
  2. Purchasing new hardware without analysing needs
  3. Training users before requirements are known
  4. Decommissioning the legacy system immediately

Explanation

Understanding existing data, dependencies and processes reveals what must be preserved and which integrations could break. This assessment informs requirements, migration planning and risk controls before any cutover occurs.

Question 18Enterprise computing systems

A company stores backups on the same disk array as its production database. Which weakness does this introduce?

  1. A single failure could destroy both production data and its backups Correct answer.
  2. Storage costs will become zero
  3. Backups will always be faster to restore
  4. The database will automatically gain redundancy

Explanation

Keeping backups on the same array as production data removes independence between the two copies, so one hardware failure or corruption event can destroy both. Effective backup strategy requires separate, ideally offsite, storage.

Question 19Enterprise computing systems

Which combination best supports both confidentiality and availability for an enterprise messaging platform?

  1. Encryption in transit plus redundant servers across zones Correct answer.
  2. Storing all messages on removable media kept at a desk
  3. Disabling failover to simplify administration
  4. A single unencrypted server in one room

Explanation

Encryption in transit protects messages from interception, while redundancy across zones keeps the service available if one zone fails. Combining security and resilience controls addresses both requirements simultaneously.

Question 20Enterprise computing systems

An enterprise evaluates moving a latency-sensitive trading application to the public cloud. Which factor is most critical in the analysis?

  1. The size of the provider's logo on its website
  2. Network round-trip latency between the application and its data sources Correct answer.
  3. The number of marketing emails the provider sends
  4. The colour scheme of the cloud management console

Explanation

Latency-sensitive applications depend on short round-trip times, so the network path between compute and data strongly affects performance. Other factors such as console appearance or marketing have no bearing on transaction speed.

Question 21Enterprise computing systems

A system uses optimistic concurrency control for online bookings. Which scenario is most likely to require a retry?

  1. A user views the seat map without booking
  2. Two users attempt to reserve the last seat at nearly the same moment Correct answer.
  3. An administrator views a report the next day
  4. A user logs out after completing a booking

Explanation

Optimistic concurrency detects conflicts at commit time, so simultaneous attempts to reserve the same seat cause one transaction to fail and need retrying. Read-only actions and later reporting do not create write conflicts.

Question 22Enterprise computing systems

An enterprise must retain financial records for seven years in a form that resists tampering. Which design best meets this?

  1. Editable spreadsheets stored on shared drives
  2. Write-once storage with cryptographic hashing and access logging Correct answer.
  3. Email attachments kept in personal inboxes
  4. Printed copies stored in an unlocked cupboard

Explanation

Write-once storage prevents alteration after records are committed, while hashing provides evidence of integrity and access logs create accountability. Together these controls support long-term retention and tamper resistance.

Question 23Enterprise computing systems

A firm's recovery point objective is 15 minutes. Which backup approach best satisfies it?

  1. Continuous replication of transaction logs to a secondary system Correct answer.
  2. Weekly archival snapshots
  3. Nightly full backups only
  4. Manual backups performed each quarter

Explanation

A recovery point objective defines the maximum acceptable data loss, so a 15-minute objective requires backups or replication at least that frequent. Continuous log replication keeps the secondary copy within minutes of production.

Question 24Enterprise computing systems

An architect must choose between vertical and horizontal scaling for a stateless web tier under unpredictable load. Which reasoning is soundest?

  1. Horizontal scaling by adding nodes suits unpredictable load and improves resilience Correct answer.
  2. Vertical scaling is always cheaper because it adds nodes automatically
  3. Vertical scaling removes the need for any load balancing
  4. Horizontal scaling requires storing session state on each individual node

Explanation

Stateless tiers can be scaled horizontally by adding interchangeable nodes behind a load balancer, which handles variable demand and tolerates node failure. Vertical scaling is limited by the maximum size of a single machine.

Question 25Enterprise computing systems

A team proposes storing encryption keys in the same database as the encrypted records. Which assessment is most accurate?

  1. It weakens protection because compromise of the database exposes both data and keys Correct answer.
  2. It has no effect on security because encryption is already applied
  3. It strengthens protection because keys are stored with the data they protect
  4. It eliminates the need for access control entirely

Explanation

Separating keys from ciphertext is a core principle because a single compromise should not reveal both. Storing them together means an attacker who obtains the database can decrypt the records directly.

Question 26Enterprise computing systems

Which statement best describes the primary role of middleware in an enterprise computing system?

  1. It permanently stores all transactional data for the enterprise.
  2. It manages the physical cooling and power for servers.
  3. It provides a layer that connects disparate applications and enables them to exchange data and services. Correct answer.
  4. It renders the user interface for web-based applications.

Explanation

Middleware acts as an integration layer that sits between operating systems and applications, allowing different systems to communicate and share services without being tightly coupled. It does not handle storage, presentation, or facilities management.

Question 27Enterprise computing systems

In a three-tier enterprise architecture, which tier is responsible for enforcing business rules and processing requests?

  1. The network tier
  2. The presentation tier
  3. The data tier
  4. The application tier Correct answer.

Explanation

The application (or business logic) tier contains the components that apply business rules, validate requests, and coordinate access to data. Presentation handles user interaction, while the data tier stores and retrieves persistent information.

Question 28Enterprise computing systems

Which protocol is most commonly used by enterprise directory services to query and modify user identity information?

  1. FTP
  2. SMTP
  3. LDAP Correct answer.
  4. SNMP

Explanation

LDAP (Lightweight Directory Access Protocol) is designed specifically for accessing and maintaining distributed directory information services, including user identities and credentials. SMTP handles email, SNMP handles network device management, and FTP handles file transfer.

Question 29Enterprise computing systems

What is the main purpose of a service level agreement (SLA) in an enterprise computing context?

  1. To document the source code of enterprise applications
  2. To define the technical architecture of the enterprise network
  3. To list the hardware inventory owned by the enterprise
  4. To specify the measurable performance and availability commitments between a provider and a customer Correct answer.

Explanation

An SLA is a formal contract that sets out expected service levels such as uptime, response time, and support responsiveness, along with remedies if those levels are not met. It is not a technical design document, an asset register, or source code documentation.

Question 30Enterprise computing systems

Which type of enterprise storage connects servers to shared block-level storage over a dedicated network?

  1. Network-attached storage (NAS)
  2. Direct-attached storage (DAS)
  3. Storage area network (SAN) Correct answer.
  4. Optical jukebox storage

Explanation

A SAN provides block-level storage access to servers over a dedicated high-speed network, making shared storage appear as local disks. NAS provides file-level access over a general network, DAS is directly attached to a single server, and optical jukeboxes are archival media.

Question 31Enterprise computing systems

Which practice best supports the principle of least privilege in an enterprise system?

  1. Sharing a single privileged account among the operations team
  2. Granting every employee administrator rights to simplify support
  3. Reviewing permissions once every five years
  4. Assigning users only the permissions required for their current job duties Correct answer.

Explanation

Least privilege means each identity receives only the access necessary to perform its assigned tasks, reducing the potential impact of misuse or compromise. Broad administrator rights, shared accounts, and infrequent reviews all violate this principle.

Question 32Enterprise computing systems

Which characteristic is typical of a relational database management system used in enterprise applications?

  1. It is designed primarily for storing unstructured multimedia files.
  2. It guarantees eventual consistency rather than transactional consistency.
  3. It stores data as key-value pairs without a fixed schema.
  4. It enforces relationships between tables through primary and foreign keys. Correct answer.

Explanation

Relational systems organise data into tables and use primary and foreign keys to enforce referential integrity between them. Key-value stores, unstructured storage, and eventual consistency are associated with NoSQL or distributed systems rather than classic relational databases.

Question 33Enterprise computing systems

What is the primary function of a load balancer in an enterprise application deployment?

  1. To distribute incoming requests across multiple servers to improve availability and performance Correct answer.
  2. To compile application source code before deployment
  3. To encrypt all data stored on the database server
  4. To provide long-term archival backup of user files

Explanation

A load balancer spreads client requests across a pool of servers so that no single server is overwhelmed and failed servers can be bypassed. Encryption, compilation, and archival backup are separate concerns handled by other tools.

Question 34Enterprise computing systems

A bank wants to ensure that a customer cannot withdraw more money than their account balance even when two withdrawals arrive at the same moment. Which database property is most directly responsible for preventing this?

  1. Scalability, because the database can handle many users
  2. Isolation, because concurrent transactions cannot observe each other's uncommitted changes Correct answer.
  3. Atomicity, because each withdrawal is treated as a single unit
  4. Durability, because committed withdrawals survive a crash

Explanation

Isolation controls how concurrent transactions interact, preventing one transaction from reading or acting on another's uncommitted state. This is what stops two simultaneous withdrawals from both seeing the same original balance. Atomicity, durability, and scalability address different concerns.

Question 35Enterprise computing systems

An enterprise runs a critical application across two data centres in different cities. Which arrangement best provides continuous service if one site becomes unavailable?

  1. A cold standby site that is powered on only after a disaster is declared
  2. A single site with redundant power supplies
  3. A backup tape stored in a nearby office
  4. An active-active configuration where both sites serve traffic simultaneously Correct answer.

Explanation

In an active-active configuration both sites are live and serving traffic, so if one fails the other continues without a service interruption. Cold standby requires time to start, redundant power supplies protect only within one site, and tapes are a recovery mechanism rather than continuous service.

Question 36Enterprise computing systems

A company wants to allow its employees to sign in once and access several separate internal applications without re-entering credentials. Which technology should it implement?

  1. Single sign-on (SSO) using a federated identity provider Correct answer.
  2. A hardware security module (HSM)
  3. A virtual private network (VPN)
  4. A demilitarised zone (DMZ)

Explanation

Single sign-on with a federated identity provider lets a user authenticate once and receive tokens that grant access to multiple trusted applications. A VPN secures network connectivity, an HSM protects cryptographic keys, and a DMZ segments network exposure.

Question 37Enterprise computing systems

An enterprise application must remain responsive while performing a long-running report generation task. Which design approach best achieves this?

  1. Increase the size of the database transaction log
  2. Place the report request on a message queue and process it asynchronously by a worker Correct answer.
  3. Disable the load balancer during report generation
  4. Process the report synchronously within the user's web request

Explanation

Asynchronous processing decouples the long-running task from the user request by queuing it for a background worker, so the application can respond immediately. Synchronous processing blocks the user, while log sizing and disabling the load balancer do not address the problem.

Question 38Enterprise computing systems

Which security control best protects data on a backup tape that is transported between sites?

  1. Labelling the tape with its contents and destination
  2. Storing the tape in a cardboard box during transit
  3. Compressing the data on the tape to reduce its size
  4. Encrypting the data on the tape with keys managed separately from the tape Correct answer.

Explanation

Encryption renders the tape contents unreadable to anyone who does not hold the decryption keys, which is essential when physical media leave a controlled environment. Keeping keys separate prevents an attacker who obtains the tape from also obtaining the means to decrypt it.

Question 39Enterprise computing systems

An enterprise is designing a disaster recovery plan and has determined that a recovery time objective (RTO) of four hours is acceptable. Which statement best interprets this requirement?

  1. The system must be tested every four hours.
  2. The system must be restored to normal operation within four hours of a disruption. Correct answer.
  3. The system may lose at most four hours of data.
  4. The system must back up data every four hours.

Explanation

RTO defines the maximum acceptable time to restore a service after a disruption, so a four-hour RTO means operations must resume within four hours. The acceptable data loss is governed by the recovery point objective (RPO), not the RTO.

Question 40Enterprise computing systems

A team is choosing between a relational database and a document database for a new catalogue service whose product attributes vary widely between items. Which consideration most strongly favours the document database?

  1. The service requires complex multi-table joins across many entities.
  2. The service must enforce strict referential integrity across all records.
  3. The service requires strong ACID transactions across multiple documents.
  4. The schema for each product type differs and is expected to evolve frequently. Correct answer.

Explanation

Document databases store each record as a self-contained document, so varying and evolving attributes do not require schema migrations across a fixed table structure. Complex joins, strict referential integrity, and multi-document ACID transactions are strengths more commonly associated with relational systems.

Question 41Enterprise computing systems

An enterprise wants to expose an internal application to business partners without granting them access to the corporate network. Which approach best achieves this?

  1. Give each partner a VPN account with full network access
  2. Place the application server directly on the internet with no firewall
  3. Publish the application through an API gateway in a DMZ with authentication and rate limiting Correct answer.
  4. Allow partners to connect to the internal database server directly

Explanation

An API gateway in a DMZ exposes only the intended interface, enforces authentication and rate limits, and shields the internal network from direct partner access. Full VPN access, an unprotected internet-facing server, and direct database access all expose far more than necessary.

Question 42Enterprise computing systems

Which benefit is most associated with adopting infrastructure as code (IaC) in an enterprise?

  1. It eliminates the need for security controls on servers.
  2. It removes the need for any testing of infrastructure changes.
  3. It makes infrastructure provisioning repeatable and version-controlled. Correct answer.
  4. It guarantees that infrastructure costs will decrease.

Explanation

IaC defines infrastructure in machine-readable files that can be versioned, reviewed, and reapplied consistently, reducing configuration drift. It does not remove the need for testing or security controls, and it does not by itself guarantee lower costs.

Question 43Enterprise computing systems

A large enterprise wants to ensure that a malicious insider cannot delete audit logs to cover their tracks. Which control most directly addresses this risk?

  1. Allowing administrators to edit log files when needed
  2. Deleting logs older than one day to save space
  3. Streaming audit logs in real time to a separate, append-only logging service with restricted access Correct answer.
  4. Storing audit logs on the same server that generates them

Explanation

Streaming logs to a separate append-only service means the source system and its administrators cannot alter or delete the retained copies. Keeping logs on the same server, allowing edits, or deleting logs quickly all undermine the integrity of the audit trail.

Question 44Enterprise computing systems

Which network segmentation approach best limits the spread of malware from an infected employee workstation to critical servers?

  1. Using only wireless connections for servers
  2. Connecting all servers directly to the internet
  3. Separating workstations and servers into distinct segments with firewall rules controlling traffic between them Correct answer.
  4. Placing all devices on a single flat network to simplify management

Explanation

Segmentation divides the network into zones with controlled traffic between them, so an infected workstation cannot freely reach server segments. A flat network allows unrestricted lateral movement, while direct internet exposure and wireless-only servers increase risk.

Question 45Enterprise computing systems

Which factor most strongly influences the choice of a synchronous replication strategy between two data centres?

  1. The number of employees in each office
  2. The network latency between the sites Correct answer.
  3. The brand of the servers used
  4. The colour scheme of the data centre walls

Explanation

Synchronous replication requires each write to be acknowledged by the remote site before it completes, so high latency between sites directly increases response time and can make the strategy impractical. Physical appearance, headcount, and server brand do not affect replication timing.

Question 46Enterprise computing systems

An enterprise is considering a hybrid integration platform to connect an on-premises ERP system with a cloud CRM. Which challenge does this approach most directly address?

  1. Eliminating the need for user authentication
  2. Reducing the physical size of the data centre
  3. Replacing the need for any data backup
  4. Ensuring that data formats and protocols differ between the two systems Correct answer.

Explanation

Hybrid integration platforms provide connectors, transformation, and routing so systems with different data formats and protocols can exchange information reliably. They do not shrink physical infrastructure, remove authentication requirements, or replace backup.

Question 47Enterprise computing systems

A company operates a microservices architecture and wants to prevent a failure in one service from cascading through the entire system. Which pattern most directly addresses this?

  1. A shared database used by all services
  2. A single monolithic deployment unit for all services
  3. A circuit breaker that stops calls to a failing service and returns a fallback response Correct answer.
  4. Increasing the timeout on every service call to infinity

Explanation

A circuit breaker detects repeated failures in a dependency and temporarily stops calling it, allowing the failing service to recover and preventing resource exhaustion in callers. Shared databases increase coupling, monoliths remove the independence of services, and infinite timeouts make cascading failure worse.

Question 48Enterprise computing systems

An enterprise is evaluating whether to adopt a message broker with at-least-once delivery for its order processing. Which design consideration is most important?

  1. The broker must store messages only in memory to maximise speed.
  2. The broker must guarantee that messages are never delivered more than once.
  3. Consumers must be designed to handle duplicate messages idempotently. Correct answer.
  4. Messages must be processed in strict global order across all queues.

Explanation

At-least-once delivery means a message may be delivered more than once, so consumers must be idempotent to avoid duplicating effects such as charging a customer twice. The other options describe guarantees that at-least-once delivery does not provide.

Question 49Enterprise computing systems

A financial services firm must demonstrate to regulators that its systems have not been altered without authorisation. Which combination of controls best provides this assurance?

  1. Cryptographic hashing of system artefacts with signed records stored in an immutable audit log Correct answer.
  2. Daily full backups and a firewall at the network perimeter
  3. Antivirus software on employee laptops and a password policy
  4. Load balancing across multiple servers and a content delivery network

Explanation

Cryptographic hashes let the firm verify that artefacts have not changed, and signed records in an immutable log provide tamper-evident evidence of integrity over time. Backups, firewalls, antivirus, passwords, load balancing, and CDNs address other concerns and do not prove integrity.

Question 50Enterprise computing systems

An architect is designing a multi-tenant SaaS platform and must prevent one tenant from reading another tenant's data. Which approach provides the strongest isolation?

  1. Relying on application code to filter queries by tenant identifier
  2. Storing all tenant data in one table and trusting users to enter the correct tenant ID
  3. Encrypting the database with a single key shared by all tenants
  4. Using a separate database schema or database instance per tenant with tenant-aware access controls Correct answer.

Explanation

Separate schemas or database instances create a hard boundary so that a defect in one tenant's query cannot reach another tenant's data, and tenant-aware access controls reinforce this. Application-only filtering, user-supplied identifiers, and a shared encryption key all leave cross-tenant exposure possible.