Design Solutions That Align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmark (MCSB) SC-100 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A software company develops a web application that uses several open-source libraries and a third-party CI/CD pipeline. The security architect is aligning with the MCRA supply chain attack mitigation guidance. The company wants to ensure that only vetted code is deployed to production. Which control should the architect implement?

   • ARequire code signing and verify signatures in the deployment pipeline.
   • BDeploy a web application firewall (WAF) in front of the application.
   • CUse a private package repository that mirrors public libraries.
   • DEnable Azure DevOps pipeline caching to speed up builds.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A university is implementing a Zero Trust strategy aligned with the MCRA. The security architect must design a solution that protects research data accessed by faculty, students, and external collaborators. The university wants to enforce least privilege and continuously verify access. Which approach should the architect recommend?

   • AUse Azure Information Protection to label all research data and block access from external collaborators.
   • BCreate separate on-premises Active Directory domains for each user group and use traditional VPN for remote access.
   • CUse Azure AD Conditional Access with policies that require MFA and device compliance, and use Azure AD entitlement management for access packages.
   • DDeploy a single firewall to protect the research data and require all users to be on the campus network.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A retail company is adopting a Zero Trust model and wants to align with the MCRA. The company has a mix of cloud and on-premises resources. The security architect needs to implement a solution that provides a unified view of user risk across all resources. Which approach aligns with the Zero Trust adoption framework?

   • AUse Azure AD Identity Protection as the central signal source for user risk and feed it into Conditional Access policies.
   • BImplement a VPN for all remote access to on-premises resources.
   • CDeploy a separate identity provider for on-premises resources.
   • DEnable Azure AD password writeback to sync password changes.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   How does the Zero Trust adoption framework influence the design of a security solution according to the MCRA?

   • AIt recommends using a single sign-on (SSO) solution as the only security control.
   • BIt allows trusted users to bypass security controls once they are inside the network.
   • CIt focuses only on protecting the network perimeter and ignores internal threats.
   • DIt requires that every access request be authenticated, authorized, and encrypted regardless of the network location.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A software company is developing a new application that uses several open-source libraries and third-party APIs. The security architect must design a solution aligned with the MCRA to protect the software supply chain. The company wants to automate the detection of vulnerabilities and ensure that only approved code is deployed. Which approach should the architect recommend?

   • ADeploy Azure Firewall to block outbound traffic from the development environment to the internet.
   • BRestrict all third-party APIs and open-source libraries from being used in the application.
   • CConduct manual code reviews for all open-source components and maintain a spreadsheet of approved libraries.
   • DUse Microsoft Defender for Cloud with supply chain protections and Azure DevOps with pipeline policies that require code signing and vulnerability scanning.
   Reveal Solution Discussion Select an answer first