Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureEasy
A global e-commerce company is designing its Zero Trust strategy. They have multiple cloud environments (Azure, AWS, GCP) and a significant remote workforce. The company wants to consolidate network security functions like firewall-as-a-service, secure web gateway, cloud access security broker (CASB), and Zero Trust Network Access (ZTNA) into a single, integrated offering. Which architecture model BEST fits this requirement?
- ASecure Access Service Edge (SASE)
- BSoftware-Defined Wide Area Network (SD-WAN)
- CIdentity Governance and Administration (IGA)
- DCloud Security Posture Management (CSPM)
Show answer & explanationAnswer & explanation
Correct answer: A. Secure Access Service Edge (SASE)
SASE (Secure Access Service Edge) is a cloud-based architecture that converges networking and security functions into a single, integrated service. It combines capabilities like FWaaS, SWG, CASB, and ZTNA, making it ideal for distributed workforces and multi-cloud environments, directly aligning with the company's need for consolidation and Zero Trust principles.
Why the other options are wrong
- B. SD-WAN optimizes network connectivity and routing but does not inherently integrate advanced security services like CASB or ZTNA.
- C. IGA focuses on managing digital identities and access rights throughout their lifecycle, which is a component of Zero Trust but not the overarching network and security architecture.
- D. CSPM focuses on identifying and remediating misconfigurations and compliance issues within cloud environments, not on consolidating network security functions for access.
Secure Access Service Edge (SASE)
A cloud-native architecture that converges network security functions (FWaaS, SWG, CASB, ZTNA) with WAN capabilities into a single, integrated service.
- Combines networking and security.
- Delivered as a cloud service.
- Supports distributed workforces and multi-cloud environments.
Memory trick: SASE: Secure All Services Everywhere.