Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsHard
A financial institution is concerned about sensitive data exfiltration from cloud applications, unauthorized access to corporate resources by third-party apps, and shadow IT. They need a solution that provides deep visibility into cloud app usage, real-time threat detection, and granular control over data. Which Microsoft security solution is best suited to address these concerns?
- AAzure Active Directory Identity Protection
- BMicrosoft Purview
- CMicrosoft Defender for Cloud Apps
- DMicrosoft Defender for Endpoint
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps (formerly Microsoft Cloud App Security) is a Cloud Access Security Broker (CASB) that provides comprehensive visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all Microsoft and third-party cloud services.
Why the other options are wrong
- A. Azure Active Directory Identity Protection focuses on identity-based risks, not control over data in cloud apps or shadow IT.
- B. Microsoft Purview focuses on data governance, compliance, and privacy, which is related but doesn't offer the real-time threat detection and granular access control for cloud apps like a CASB.
- D. Microsoft Defender for Endpoint focuses on endpoint security, not cloud application security and data exfiltration.
Microsoft Defender for Cloud Apps
A Cloud Access Security Broker (CASB) that extends visibility and control over cloud applications.
- Discovers shadow IT and assesses cloud app risk.
- Protects sensitive information with data loss prevention (DLP).
- Detects anomalous behavior and mitigates cyberthreats.
Memory trick: Defender for Cloud Apps is your cloud's 'security guard' for everything in the sky.