Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureEasy

A global e-commerce company is designing its Zero Trust strategy. They have multiple cloud environments (Azure, AWS, GCP) and a significant remote workforce. The company wants to consolidate network security functions like firewall-as-a-service, secure web gateway, cloud access security broker (CASB), and Zero Trust Network Access (ZTNA) into a single, integrated offering. Which architecture model BEST fits this requirement?

  1. ASecure Access Service Edge (SASE)
  2. BSoftware-Defined Wide Area Network (SD-WAN)
  3. CIdentity Governance and Administration (IGA)
  4. DCloud Security Posture Management (CSPM)
Show answer & explanation

Correct answer: A. Secure Access Service Edge (SASE)

SASE (Secure Access Service Edge) is a cloud-based architecture that converges networking and security functions into a single, integrated service. It combines capabilities like FWaaS, SWG, CASB, and ZTNA, making it ideal for distributed workforces and multi-cloud environments, directly aligning with the company's need for consolidation and Zero Trust principles.

Why the other options are wrong

  • B. SD-WAN optimizes network connectivity and routing but does not inherently integrate advanced security services like CASB or ZTNA.
  • C. IGA focuses on managing digital identities and access rights throughout their lifecycle, which is a component of Zero Trust but not the overarching network and security architecture.
  • D. CSPM focuses on identifying and remediating misconfigurations and compliance issues within cloud environments, not on consolidating network security functions for access.

Secure Access Service Edge (SASE)

A cloud-native architecture that converges network security functions (FWaaS, SWG, CASB, ZTNA) with WAN capabilities into a single, integrated service.

  • Combines networking and security.
  • Delivered as a cloud service.
  • Supports distributed workforces and multi-cloud environments.

Memory trick: SASE: Secure All Services Everywhere.

More Design a Zero Trust strategy and architecture questions