ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
During a security review, your organization plans to migrate a microservices application from an isolated staging environment to a shared quality-assurance (QA) environment where several development teams test concurrently using masked subsets of production data. Which additional operational risk becomes most prominent and must be mitigated before the migration?
Expanded attack surface from exposing staging virtual machines to the internet
Insider threat posed by privileged cloud infrastructure administrators
Cross-team data leakage and contamination caused by shared test resources
Unpatched operating systems on the organization's build servers
The move from an isolated staging environment to a shared QA environment introduces multi-tenancy. When teams share the same infrastructure while using data derived from production, the greatest new concern is inadvertent data contamination or leakage between tenants. Strong data segregation controls, access controls, and strict data sanitization are required. The other choices describe valid security issues, but they are not uniquely amplified by the transition to a shared QA environment: public exposure of staging VMs is an architecture decision unrelated to multi-tenancy, unpatched build servers are a pre-existing vulnerability, and insider threats from cloud administrators exist in every environment.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is multi-tenancy in shared environments?
Open an interactive chat with Bash
How can data masking help prevent data leakage in QA environments?
Open an interactive chat with Bash
What controls are essential for preventing cross-team data contamination?
Open an interactive chat with Bash
What is multi-tenancy in a shared environment?
Open an interactive chat with Bash
How does data masking prevent leakage in shared testing environments?
Open an interactive chat with Bash
What controls mitigate operational risks in shared QA environments?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)