Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureMedium
A global retailer is designing a Zero Trust architecture for its e-commerce platform hosted across Azure and AWS. The platform processes sensitive customer data, including payment information. The security architects must ensure that data remains confidential and unalterable during transit between microservices, across cloud boundaries, and when stored at rest. Which security capability is paramount for meeting these requirements?
- ASecurity Information and Event Management (SIEM)
- BData Loss Prevention (DLP)
- CEnd-to-End Encryption (E2EE)
- DWeb Application Firewall (WAF)
Show answer & explanationAnswer & explanation
Correct answer: C. End-to-End Encryption (E2EE)
End-to-End Encryption (E2EE) ensures that data is encrypted at its origin and remains encrypted until it reaches its final destination, where it is decrypted. This protects data confidentiality and integrity during transit and at rest across various systems and cloud environments, aligning with the Zero Trust principle of securing all data.
Why the other options are wrong
- A. SIEM is for log collection, threat detection, and incident response, not direct data protection.
- B. DLP prevents sensitive data from leaving defined boundaries but doesn't inherently encrypt data during transit or at rest.
- D. WAF protects web applications from common attacks but doesn't provide end-to-end data encryption.
End-to-End Encryption (E2EE)
A communication system where only the communicating users can read the messages. In Zero Trust, it means data is encrypted at its source and remains encrypted until its ultimate destination, protecting it in transit and at rest.
- Encrypts data at the origin and decrypts only at the destination.
- Protects data confidentiality and integrity across untrusted networks.
- Crucial for sensitive data in multi-cloud and hybrid environments.
- Aligns with the Zero Trust principle of securing all data.
Memory trick: Encryption: From source to destination, always a secret.