sc-900 Practice Question 1762
Exam: sc-900
Domain: Describe the concepts of security, compliance, and identity
Topic: Describe security methodologies
Difficulty: medium
Contoso Ltd is evaluating their hybrid cloud security posture and wants to ensure they are adhering to the principle of Zero Trust. They have a hybrid environment with on-premises servers and Azure resources. Which of the following actions would best demonstrate adherence to the principle of Zero Trust in this scenario?
Answer Options
A
Implement continuous monitoring and logging of all user activities.
B
Enforce strict IAM policies and use multi-factor authentication (MFA).
C
Encrypt all sensitive data stored in Azure Blob Storage.
D
Allow all traffic between on-premises and Azure resources without authentication.
Correct Answer
B: Enforce strict IAM policies and use multi-factor authentication (MFA).
Explanation
The correct answer is B. Enforcing strict identity and access management (IAM) policies ensures that only authorized users and services can access resources, which aligns with the principle of Zero Trust. Option A is incorrect because it does not address the principle of zero trust; it focuses on monitoring. Option C is incorrect as it pertains to data encryption rather than access control. Option D is incorrect because it suggests allowing all traffic without authentication or authorization, which contradicts the principle of zero trust.