Microsoft Cybersecurity Architect (SC-100)Design security for applications and dataMedium
A large enterprise is designing a new data analytics platform on Azure that will consolidate various data sources, including on-premises databases, SaaS applications, and IoT devices. The platform will use Azure Data Lake Storage Gen2 as its central data repository. The security architect needs to ensure that all data ingested into Data Lake Storage Gen2 is automatically scanned for sensitive information (e.g., PII, financial data) and that data owners are notified of any findings to apply appropriate governance policies. Which Azure service is best suited for this automated data discovery and classification within the data lake?
- AAzure Sentinel for security information and event management (SIEM).
- BAzure Data Factory with custom data transformation activities.
- CAzure Information Protection (AIP) for files stored.
- DMicrosoft Purview for unified data governance and data mapping.
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Purview for unified data governance and data mapping.
Microsoft Purview is designed for unified data governance, including automated data discovery, classification using built-in and custom classifiers, and mapping sensitive data across hybrid environments, making it ideal for this scenario.
Why the other options are wrong
- A. Azure Sentinel is a SIEM solution for security analytics and threat intelligence, not for automated data discovery and classification within a data lake.
- B. Azure Data Factory is for data movement and transformation. While it can process data, it doesn't natively provide automated sensitive data scanning and classification across a data lake without extensive custom development.
- C. AIP is primarily for classifying and protecting documents and emails within Microsoft 365 and some file shares, not for automated scanning and mapping of large-scale data lakes and diverse data sources.
Microsoft Purview
A unified data governance solution that helps manage and govern your on-premises, multi-cloud, and SaaS data. It enables data discovery, sensitive data classification, and data lineage.
- Provides a holistic, up-to-date map of your data landscape.
- Automates sensitive data discovery and classification.
- Helps understand data origins and transformations (data lineage).
Memory trick: Purview for a Unified Data Map.