Microsoft Cybersecurity Architect Expert SC-100
Get started today
Ultimate access to all questions.
You are tasked with designing a new Azure environment, adhering to the security best practices outlined in the Microsoft Cloud Adoption Framework for Azure. This environment is to be structured with one subscription dedicated to shared infrastructure components and three additional subscriptions dedicated to different applications. Your responsibility is to recommend a deployment solution that incorporates the use of network security groups (NSGs), Azure Firewall, Azure Key Vault, and Azure Bastion. The recommended solution should ensure minimal deployment effort and strictly follow the security best practices stated in the Microsoft Cloud Adoption Framework for Azure. What should you include in your recommendation?
You are tasked with designing a new Azure environment, adhering to the security best practices outlined in the Microsoft Cloud Adoption Framework for Azure. This environment is to be structured with one subscription dedicated to shared infrastructure components and three additional subscriptions dedicated to different applications. Your responsibility is to recommend a deployment solution that incorporates the use of network security groups (NSGs), Azure Firewall, Azure Key Vault, and Azure Bastion. The recommended solution should ensure minimal deployment effort and strictly follow the security best practices stated in the Microsoft Cloud Adoption Framework for Azure. What should you include in your recommendation?
Explanation:
The Azure landing zone accelerator is specifically designed to adhere to the architecture and best practices of the Microsoft Cloud Adoption Framework for Azure. It provides a comprehensive set of guidelines and a reference implementation through infrastructure as code templates that can be used to prepare your landing zones. This approach minimizes deployment effort while ensuring the environment includes necessary security measures such as network security groups (NSGs), Azure Firewall, Azure Key Vault, and Azure Bastion. The other options do not provide the same level of detailed, ready-to-use deployment templates that align with the Cloud Adoption Framework for Azure.