SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ260

Design security solutions for infrastructure

You have an Azure subscription.

You plan to implement enterprise-scale landing zones based on the Microsoft Cloud Adoption Framework for Azure. The deployment will include one platform landing zone for all shared services and three application landing zones, each of which will host a different Azure application.

You need to recommend which resource to deploy to each landing zone. The solution must meet the Cloud Adoption Framework best-practice recommendations for enterprise-scale landing zones.

What should you recommend?

  • A an Azure firewall
  • B an Azure virtual network gateway
  • C an Azure Private DNS zone
  • D an Azure key vault
Explanation

Application landing zones host the resources for a single workload or application. Deploying an Azure Key Vault with each application landing zone keeps that workload’s keys, secrets, and certificates isolated within its own lifecycle and security boundary. Azure Firewall, virtual network gateways, and shared DNS are typically centralized platform connectivity services rather than duplicated for each application workload.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!