Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Cybersecurity Architect Expert · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
For me, being this about ALZ, I definitely go for BC, firewall and WAF are for applications, not for the zone where those lands, I mean, what if you have a private cluster with no public access? Besides, this article already shared: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/security mentiones that: "Make use of the recommendations, alerting, and remediation capabilities of Microsoft Defender for Cloud. Your security team can also integrate Microsoft Defender for Cloud into Microsoft Sentinel if they need a more robust, centrally managed hybrid and multicloud Security Information Event Management (SIEM)/Security Orchestration and Response (SOAR) solution." So, sentinel definitely helps increasing the ALZ security.
A good reference from Microsoft Learn on how to improve the security score in Microsoft Defender for Cloud: https://learn.microsoft.com/en-us/azure/defender-for-cloud/secure-score-security-controls#improving-a-secure-score
Tricky question. Reading the CAF, and based on the following TOPIC: "Design area overview," https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/security#design-area-overview However, I recommend everyone expand the research...