sc-900 Practice Question 1765
Exam: sc-900
Domain: Describe the concepts of security, compliance, and identity
Topic: Describe security concepts
Difficulty: medium
Contoso Ltd is implementing a new hybrid cloud configuration where their on-premises network is connected to Azure via ExpressRoute. They want to ensure that their data remains confidential, integrity is maintained, and availability is not compromised. Which of the following best describes the approach they should take to align with the CIA Triad principles in their hybrid cloud environment?
Answer Options
A
Implementing only encryption for all data stored in Azure
B
Using encryption for data, secure access controls for integrity, and redundancy for availability
C
Deploying firewalls at the network boundary to control traffic
D
Conducting regular compliance checks and audits
Correct Answer
B: Using encryption for data, secure access controls for integrity, and redundancy for availability
Explanation
The correct answer is B. To align with the CIA Triad principles, Contoso Ltd should implement encryption for confidentiality, use secure access controls for integrity, and ensure high availability through redundancy and disaster recovery plans. Option A is incorrect because it focuses only on encryption without considering integrity and availability. Option C is incorrect as it suggests using firewalls alone, which does not cover all aspects of the CIA Triad. Option D is incorrect because it mentions compliance checks, which do not directly address the CIA Triad principles.