Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureMedium
A healthcare provider is designing a Zero Trust architecture for its patient data systems, which are highly sensitive and subject to strict regulatory compliance (e.g., HIPAA). The organization requires that access to these systems is continuously re-evaluated based on real-time risk signals, such as changes in user location, device health, or unusual activity patterns, even after initial authentication. Which Azure AD feature provides this continuous, real-time access evaluation?
- AAzure AD Identity Protection
- BContinuous Access Evaluation (CAE)
- CAzure AD Multi-Factor Authentication (MFA)
- DAzure AD Conditional Access
Show answer & explanationAnswer & explanation
Correct answer: B. Continuous Access Evaluation (CAE)
Continuous Access Evaluation (CAE) allows Azure AD to revoke access tokens in near real-time based on critical events like account disablement, password changes, or location changes, providing continuous re-evaluation of access post-authentication, which is crucial for high-security Zero Trust environments like healthcare.
Why the other options are wrong
- A. Azure AD Identity Protection focuses on detecting and remediating identity-based risks (e.g., compromised credentials), but doesn't provide continuous, real-time token revocation based on dynamic conditions.
- C. Azure AD MFA enhances initial authentication security but does not provide continuous, real-time re-evaluation of access during an active session.
- D. Azure AD Conditional Access evaluates conditions at the time of initial authentication, but by default, it does not continuously re-evaluate access during an active session based on changing signals.
Continuous Access Evaluation (CAE)
Continuous Access Evaluation (CAE) is an Azure AD feature that allows for near real-time enforcement of access policies and immediate revocation of access tokens based on critical events or policy changes, even during an active user session.
- Revokes access tokens in near real-time.
- Responds to critical events like account disablement, password change, location change.
- Enhances security by continuously validating access during a session.
Memory trick: CAE: 'Constantly Assessing Everything' for your access.