SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ306

Design security solutions for infrastructure

You are designing new Azure applications using Microsoft Cloud Adoption Framework for Azure security best practices. Each application will be deployed into a dedicated, secure environment containing isolated instances of:

  • Azure Key Vault
  • Virtual networks
  • An Azure subscription
  • Azure Policy assignments
  • Network security groups (NSGs)
  • Role-based access control (RBAC) assignments

Recommend the environment type and deployment module. The solution must use infrastructure as code (IaC) to deploy every application environment.

What should you recommend?

Select
Environment type:
Module:
Explanation

An Azure landing zone is a standardized, governed Azure environment that provides subscription organization, identity and access management, network topology and connectivity, security, and governance. Bicep and Terraform are the recommended IaC options for modular Azure landing zone deployments; they can deploy the required subscriptions, policy/RBAC assignments, networks, NSGs, and Key Vault resources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!