SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ248

Design security solutions for applications and data

You are developing an application lifecycle management process based on the Microsoft Security Development Lifecycle (SDL).

You need to recommend a security standard for onboarding applications to Azure. The standard will contain recommendations for application design, development, and deployment.

What should be included during the application design phase?

  • A software decomposition by using Microsoft Visual Studio Enterprise
  • B dynamic application security testing (DAST) by using Veracode
  • C threat modeling by using the Microsoft Threat Modeling Tool
  • D static application security testing (SAST) by using SonarQube
Explanation

Microsoft SDL requires threat modeling during the design phase to identify, categorize, assess, and mitigate security threats before they become embedded in the application architecture. The Microsoft Threat Modeling Tool supports this SDL design-analysis activity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!