sc-900 Practice Question 1761
Exam: sc-900
Domain: Describe the concepts of security, compliance, and identity
Topic: Describe security methodologies
Difficulty: medium
During a recent security audit at Contoso Ltd, it was discovered that a critical application running in Azure Virtual Machines had been compromised due to an overly permissive network configuration. To address this, they decide to implement the principle of Assume Breach. Which action should they take to adhere to this principle?
Answer Options
A
Enable detailed logging and monitoring of all network traffic.
B
Implement network segmentation and micro-segmentation.
C
Encrypt all sensitive data stored in Azure Blob Storage.
D
Disable all firewalls to allow easier troubleshooting.
Correct Answer
B: Implement network segmentation and micro-segmentation.
Explanation
The correct answer is B. Implementing network segmentation and using micro-segmentation ensures that even if one part of the network is breached, the rest remains secure. Option A is incorrect because it does not address the principle of assume breach; it focuses on monitoring. Option C is incorrect as it pertains to data encryption rather than network security. Option D is incorrect because it suggests disabling firewalls, which would increase the risk of unauthorized access.