Design Solutions That Align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmark (MCSB) SC-100 Practice Questions (Page 9)

Questions 41–42

1. 41expert · hard

   A large enterprise is designing a security architecture aligned with the MCRA. The CISO wants to implement a Zero Trust model, but the existing network relies on a traditional perimeter with a VPN for remote access. The security architect must balance the need for improved security with the cost of replacing the VPN infrastructure. Which approach best aligns with MCRA while minimizing disruption?

   • ADeploy Azure AD Conditional Access with MFA and device compliance, and gradually migrate VPN users to Azure AD Application Proxy for internal apps.
   • BReplace the VPN with a site-to-site VPN to Azure for all remote users.
   • CImplement a full zero-trust network access (ZTNA) solution from a third-party vendor immediately.
   • DKeep the VPN and add MFA only for VPN access.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A healthcare organization is deploying an AI-powered chatbot that processes patient inquiries. The security architect must ensure the solution aligns with the Microsoft Cloud Security Benchmark (MCSB) and the MCRA. The organization is particularly concerned about data privacy and the potential for the AI to be manipulated. Which set of controls should the architect prioritize?

   • ARequire all users to authenticate with MFA before accessing the chatbot.
   • BImplement data loss prevention (DLP) policies for the AI service and use Azure AI Content Safety to filter harmful inputs and outputs.
   • CDisable logging for the AI service to minimize the risk of sensitive data being stored in logs.
   • DFocus solely on network security by placing the AI service in a private subnet with strict NSG rules.
   Reveal Solution Discussion Select an answer first