SC-100: Microsoft Cybersecurity ArchitectDemo

Question

You have legacy operational technology (OT) and IoT devices.

You need to recommend best practices, based on the Microsoft Cybersecurity Reference Architectures (MCRA), for applying Zero Trust principles to the OT and IoT devices. The solution must minimize the risk of business-operation disruption.

Which two security methodologies should you recommend? Each correct answer represents part of the solution.

NOTE: Each correct selection is worth one point.

Choose two

A active scanning
B threat monitoring
C software patching
D passive traffic monitoring

Explanation

For legacy OT and IoT environments, passive traffic monitoring supplies device and communication visibility without directly interacting with fragile systems, while threat monitoring detects anomalous or malicious activity. MCRA guidance prioritizes passive monitoring because active vulnerability scans can crash some remote systems, creating operational disruption.

Learn more

Integrate OT/IoT security into the Infrastructure/Networking discipline

SC-100: Microsoft Cybersecurity ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ156

Community Discussion