Question 1
BeginnerIT Architectures, Technologies, Standards · Business vs. Technical Requirements
A solutions architect is conducting a stakeholder interview for a new vSphere 8.x environment. The Chief Information Security Officer (CISO) states: 'All virtual machines handling financial data must be encrypted at rest using a FIPS 140-2 validated module.'
How should this statement be classified in the design documentation?
Answer and explanation
Correct answer: B
This is a Business Requirement (specifically a regulatory/compliance requirement). It defines 'what' the business needs to achieve (compliance with security standards) rather than 'how' it must be implemented technically (which would be a technical requirement, though the line is often blurred, the source is a business stakeholder defining a compliance need). It acts as a constraint on the design choices, but fundamentally starts as a requirement.
