Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityEasy
A global enterprise needs to manage the identities of its 200,000 employees, ensuring they can securely access various applications and resources, both on-premises and in the cloud, from any device. Which type of service is best suited to fulfill this broad requirement?
- AIdentity and Access Management (IAM)
- BVirtual Private Network (VPN)
- CNetwork Security Group (NSG)
- DData Loss Prevention (DLP)
Show answer & explanationAnswer & explanation
Correct answer: A. Identity and Access Management (IAM)
Identity and Access Management (IAM) provides a comprehensive framework for managing digital identities and controlling access to resources across an organization's entire IT infrastructure.
Why the other options are wrong
- B. VPNs provide secure network connections, but do not manage identities or access to applications.
- C. NSGs are used for network traffic filtering, not identity management.
- D. DLP focuses on preventing sensitive data from leaving the organization, not managing user identities or access.
Identity and Access Management (IAM)
A framework of policies and technologies that enables organizations to manage digital identities and control user access to resources.
- Manages user identities and authentication.
- Controls authorization to resources.
- Spans on-premises and cloud environments.
Memory trick: IAM Manages All Access