Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureEasy
A defense contractor is designing a Zero Trust architecture for its highly sensitive research and development environment. The environment contains intellectual property that must be protected with the highest level of assurance. To mitigate the risk of credential theft and malware, administrators accessing this environment must use dedicated, hardened workstations that are isolated from the general corporate network and internet browsing. Which specific Zero Trust security control does this describe?
- APrivileged Access Workstations (PAWs)
- BSecurity Information and Event Management (SIEM)
- CEndpoint Detection and Response (EDR)
- DCloud Access Security Broker (CASB)
Show answer & explanationAnswer & explanation
Correct answer: A. Privileged Access Workstations (PAWs)
Privileged Access Workstations (PAWs) are hardened, dedicated devices specifically designed for sensitive administrative tasks. They are isolated from general use and browsing to minimize exposure to threats, directly addressing the scenario's requirements for high-assurance access to sensitive environments.
Why the other options are wrong
- B. Security Information and Event Management (SIEM) is a system for collecting, analyzing, and reporting on security events, not a specific type of workstation.
- C. Endpoint Detection and Response (EDR) is a tool for monitoring and responding to threats on endpoints, not a dedicated hardened workstation.
- D. Cloud Access Security Broker (CASB) enforces security policies for cloud applications and data, not for securing administrative workstations.
Privileged Access Workstations (PAWs)
Highly secured, dedicated workstations used by administrators and other privileged users to perform sensitive tasks. PAWs are hardened, isolated from general-purpose networks, and configured to minimize attack surface, reducing the risk of credential theft and malware compromise.
- Dedicated for privileged users
- Hardened and isolated
- Minimizes attack surface
- Reduces risk of credential theft
Memory trick: PAWs are the king's dedicated, uncompromisable fortress.