Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureEasy
A multinational corporation is expanding its operations and leveraging multiple cloud providers (Azure, AWS, GCP) in addition to its on-premises data centers. The security team needs a comprehensive solution to gain visibility into the security posture of all these environments, identify misconfigurations, enforce compliance, and provide workload protection across IaaS and PaaS services. Which Microsoft security service is designed to centrally manage and secure this hybrid and multi-cloud estate under a Zero Trust model?
- AMicrosoft Entra External ID
- BMicrosoft Endpoint Manager
- CAzure Application Gateway
- DMicrosoft Defender for Cloud
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Defender for Cloud
Microsoft Defender for Cloud provides Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) capabilities across hybrid and multi-cloud environments, offering centralized visibility, compliance, and threat protection for IaaS and PaaS resources, which is essential for a Zero Trust strategy.
Why the other options are wrong
- A. Microsoft Entra External ID (formerly Azure AD B2C) is for managing customer and partner identities, not multi-cloud security posture and workload protection.
- B. Microsoft Endpoint Manager (Intune) focuses on endpoint device management and application management, not multi-cloud infrastructure security.
- C. Azure Application Gateway is a web traffic load balancer and WAF for web applications, not a multi-cloud security posture and workload protection solution.
Microsoft Defender for Cloud (Multi-Cloud CSPM & CWP)
Microsoft Defender for Cloud is a unified security management solution that provides Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) across hybrid and multi-cloud environments.
- Offers security posture management across Azure, AWS, and GCP.
- Provides threat protection for various workload types.
- Helps identify misconfigurations and enforce compliance standards.
Memory trick: Defender for Cloud 'defends your diverse digital domain'.