QuestionQ164

Design security solutions for infrastructure

You need to recommend a solution to secure the landing zones. The solution must satisfy the landing zone and business requirements.

What should be configured for each landing zone?

  • A an ExpressRoute gateway
  • B Microsoft Defender for Cloud
  • C an Azure Private DNS zone
  • D Azure DDoS Protection Standard
Explanation

Microsoft Defender for Cloud is the Azure security service used to assess and improve security posture, apply security recommendations, and provide workload protection across landing zone subscriptions. Azure landing zone guidance recommends enabling Defender for Cloud for all subscriptions and using Azure Policy to ensure compliance.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!