sc-900 Practice Question 1763
Exam: sc-900
Domain: Describe the concepts of security, compliance, and identity
Topic: Describe security methodologies
Difficulty: medium
Contoso Ltd has recently experienced a security breach where an attacker gained unauthorized access to their Azure environment. In response, they are reviewing their security practices to better adhere to the principle of Assume Breach. Which of the following actions would best help them achieve this principle?
Answer Options
A
Enable detailed logging and monitoring of all user activities.
B
Develop and implement a comprehensive incident response plan.
C
Encrypt all sensitive data stored in Azure Blob Storage.
D
Disable all security controls to simplify management.
Correct Answer
B: Develop and implement a comprehensive incident response plan.
Explanation
The correct answer is B. Implementing a robust incident response plan ensures that the organization can quickly detect and respond to security incidents, which aligns with the principle of assume breach. Option A is incorrect because it does not address the principle of assume breach; it focuses on monitoring. Option C is incorrect as it pertains to data encryption rather than incident response. Option D is incorrect because it suggests disabling security controls, which would increase the risk of unauthorized access.