Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureEasy
A multinational corporation is expanding its operations and leveraging multiple cloud providers (Azure, AWS, GCP) for various workloads. They need to establish a unified security posture management solution that provides continuous visibility into configurations, compliance, and threats across all these cloud environments. The solution must also offer automated remediation capabilities and integrate with their existing security information and event management (SIEM) system.
- ADeploy a Security Information and Event Management (SIEM) system with custom connectors for each cloud.
- BUtilize Microsoft Defender for Cloud as a multi-cloud CSPM solution.
- CImplement individual Cloud Security Posture Management (CSPM) tools provided by each cloud vendor.
- DDevelop custom scripts to audit cloud configurations and send alerts to the SIEM.
Show answer & explanationAnswer & explanation
Correct answer: B. Utilize Microsoft Defender for Cloud as a multi-cloud CSPM solution.
Microsoft Defender for Cloud offers robust multi-cloud capabilities, providing CSPM features across Azure, AWS, and GCP. It centralizes security posture management, offers continuous visibility, compliance assessment, automated remediation, and integrates with SIEM systems, fulfilling all the specified requirements for a unified solution.
Why the other options are wrong
- A. A SIEM primarily collects logs; while it can ingest data, it doesn't provide inherent CSPM capabilities like continuous posture assessment, compliance checks, or automated remediation without significant custom development.
- C. Using individual tools for each cloud would result in fragmented visibility and management, failing the 'unified security posture management' requirement.
- D. Custom scripts are prone to errors, difficult to maintain, and lack the comprehensive, continuous, and automated capabilities of a dedicated CSPM solution.
Microsoft Defender for Cloud (Multi-Cloud CSPM)
A unified security management solution that provides security posture management and threat protection across Azure, AWS, and GCP.
- Offers Cloud Security Posture Management (CSPM) capabilities.
- Provides Cloud Workload Protection (CWP) for various resources.
- Supports continuous assessment of security posture against benchmarks.
- Enables automated remediation and integrates with security tools.
Memory trick: Defender for Cloud: Defends All Clouds, Continuously.