Design Solutions That Align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmark (MCSB) SC-100 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A financial services firm is concerned about insider threats from employees with access to sensitive customer data. The security architect is aligning with the MCRA's insider threat guidance and the Zero Trust adoption framework. The company already uses Azure AD Identity Protection and Microsoft Purview. Which combination of controls should the architect recommend to detect and mitigate malicious insider activity?

   • AImplement Azure AD Conditional Access policies that block access from unmanaged devices.
   • BDeploy Microsoft Defender for Cloud Apps with anomaly detection policies and user risk policies in Azure AD Identity Protection.
   • CEnable Azure AD Privileged Identity Management (PIM) for all users with access to customer data.
   • DConfigure Microsoft Purview sensitivity labels and data loss prevention (DLP) policies for all documents.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   When designing a security solution using the MCRA, which approach best aligns with the MCRA's guidance for cybersecurity capabilities?

   • AImplement security controls in a siloed manner, focusing on each capability independently without integration.
   • BFocus exclusively on network security and ignore identity and data protection.
   • CSelect security capabilities that cover all layers of the attack chain, from identity to data, and integrate them for defense-in-depth.
   • DDeploy only a single security tool that claims to address all security needs.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A large enterprise is implementing a security strategy aligned with the MCRA. The security architect must design a solution that protects against insider threats, including those involving AI-powered tools. The company wants to monitor user activity and detect risky behavior. Which approach should the architect recommend?

   • ADeploy Azure Information Protection to label all data and block access to AI tools.
   • BUse Microsoft Purview Insider Risk Management and integrate with Azure AI Content Safety to detect risky AI interactions.
   • CUse Azure AD Privileged Identity Management (PIM) to require approval for all access to AI tools.
   • DUse Azure Monitor to collect all user activity logs and create alerts for any AI tool usage.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A manufacturing company is deploying a new IoT solution to monitor production equipment. The security architect must design a solution aligned with the MCRA that protects the IoT devices from external attacks and ensures that data collected from the devices is secure. The company wants to use a centralized security management platform. Which approach should the architect recommend?

   • AUse Azure Defender for IoT to monitor the devices and route all device traffic through Azure Firewall.
   • BUse Azure IoT Hub's built-in security features and enable diagnostic logging for all devices.
   • CDeploy a separate virtual network for each IoT device and use NSGs to isolate them.
   • DConfigure each IoT device with a strong password and rely on the manufacturing network's existing perimeter firewall.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which principle is a core component of the Zero Trust adoption framework that the MCRA integrates with?

   • AGrant broad access to increase productivity
   • BRely on a strong perimeter
   • CVerify explicitly
   • DTrust all internal traffic
   Reveal Solution Discussion Select an answer first