sc-900 Practice Question 1760
Exam: sc-900
Domain: Describe the concepts of security, compliance, and identity
Topic: Describe security methodologies
Difficulty: medium
Contoso Ltd is implementing Zero Trust principles to secure their hybrid cloud environment. They have recently migrated some applications to Azure and want to ensure that only necessary permissions are granted to users. Which of the following actions best aligns with the principle of Least Privilege in this scenario?
Answer Options
A
Implement continuous monitoring and logging of all user activities.
B
Assign roles and permissions based on the principle of least privilege.
C
Encrypt all sensitive data stored in Azure Blob Storage.
D
Grant full administrative access to all users to simplify management.
Correct Answer
B: Assign roles and permissions based on the principle of least privilege.
Explanation
The correct answer is B. Implementing role-based access control (RBAC) ensures that users and services have the minimum level of access needed to perform their job functions, which is the essence of the Least Privilege principle. Option A is incorrect because it does not address the principle of least privilege; instead, it focuses on monitoring. Option C is incorrect as it pertains to data encryption rather than access control. Option D is incorrect because it suggests granting more permissions than necessary, which contradicts the principle of least privilege.