Ultimate access to all questions.
In the context of Azure security, the defense-in-depth model is a strategic approach that layers multiple security measures to protect against a wide range of threats. An organization is planning to migrate its infrastructure to Azure and is particularly concerned about securing its data, identity, and network across different layers to ensure compliance with industry standards and to mitigate potential threats effectively. Considering the need for a comprehensive security framework that addresses various security domains, which of the following statements accurately describes the defense-in-depth model and its implementation in Azure? (Choose two options)
A
The defense-in-depth model is not applicable in Azure as it relies solely on perimeter defenses.
B
The defense-in-depth model layers multiple security measures across different security domains in Azure, such as identity, network, and data, to create a comprehensive security framework.
C
The defense-in-depth model only focuses on identity and access management in Azure, neglecting other security domains.
D
The defense-in-depth model is only used for physical security and does not apply to digital environments like Azure.
E
Azure supports the defense-in-depth model through services like Microsoft Entra ID for identity management, Azure Firewall for network security, and Azure Security Center for overall security posture management.