SC-100 · Question #114
You have been hired to help an organization secure their Azure landing zone design. The current design includes implementation plans for both compute and storage services. You have been asked to…
The correct answer is A. Prevent information disclosure. E. Ensure non-repudiation. Your recommendation will ensure non-repudiation and prevent information disclosure. Both of these are benefits provided by Public Key Infrastructure (PKI). PKI provides a framework for creating, managing, and deploying X.509 certificates that can be used to digitally sign data…
Question
You have been hired to help an organization secure their Azure landing zone design. The current design includes implementation plans for both compute and storage services. You have been asked to suggest an overall approach that will enhance the security of the overall system. You recommend adding Azure Key Vault to the landing zone to support public key infrastructure (PKI). Which two security requirements does your recommendation meet? Each correct answer presents part of the solution.
Options
- APrevent information disclosure.
- BEnhance data availability.
- CFacilitate recovery of lost data.
- DPrevent data modifications.
- EEnsure non-repudiation.
How the community answered
(41 responses)- A76% (31)
- B15% (6)
- C2% (1)
- D7% (3)
Explanation
Your recommendation will ensure non-repudiation and prevent information disclosure. Both of these are benefits provided by Public Key Infrastructure (PKI). PKI provides a framework for creating, managing, and deploying X.509 certificates that can be used to digitally sign data. A digital signature ensures nonrepudiation, meaning that the signer cannot deny, or repudiate, that their signature was used. Certificates are also used on apps and web servers to facilitate encrypted communications, such as with Hypertext Transfer Protocol Secure (HTTPS). Azure Key Vault can be used to create and manage digital certificates. PKI does not facilitate the recovery of lost data. Azure Backup can be used to provide this benefit. PKI does not prevent data modifications. However, digital signatures can be used to detect data modifications. If signed data has been modified, the signature will be invalid. PKI does not enhance data availability. This is typically done using data replication schemes, clustering, and other resiliency approaches. Services like Azure Load Balancer and Azure Application Gateway can be used to enhance data availability.
Topics
Community Discussion
No community discussion yet for this question.