SC-100 · Question #156
You are designing a new Azure environment based on the security best practices of the Microsoft Cloud Adoption Framework for Azure. The environment will contain one subscription for shared infrastruct
The correct answer is A. the Azure landing zone accelerator. The Azure Landing Zone Accelerator provides a pre-built, opinionated reference implementation of the Microsoft Cloud Adoption Framework (CAF) landing zone architecture. It automatically deploys shared infrastructure components - including NSGs, Azure Firewall, Azure Key Vault, an
Question
You are designing a new Azure environment based on the security best practices of the Microsoft Cloud Adoption Framework for Azure. The environment will contain one subscription for shared infrastructure components and three separate subscriptions for applications. You need to recommend a deployment solution that includes network security groups (NSGs), Azure Firewall, Azure Key Vault, and Azure Bastion. The solution must minimize deployment effort and follow security best practices of the Microsoft Cloud Adoption Framework for Azure. What should you include in the recommendation?
Options
- Athe Azure landing zone accelerator
- Bthe Azure Well-Architected Framework
- CAzure Security Benchmark v3
- DAzure Advisor
How the community answered
(50 responses)- A78% (39)
- B14% (7)
- C2% (1)
- D6% (3)
Explanation
The Azure Landing Zone Accelerator provides a pre-built, opinionated reference implementation of the Microsoft Cloud Adoption Framework (CAF) landing zone architecture. It automatically deploys shared infrastructure components - including NSGs, Azure Firewall, Azure Key Vault, and Azure Bastion - across a hub-and-spoke subscription model with minimal manual effort. The Azure Well-Architected Framework (B) offers design guidance but no deployment tooling. Azure Security Benchmark v3 (C) provides security control recommendations without deployment automation. Azure Advisor (D) offers reactive cost/security recommendations for existing resources but does not provision new environments.
Topics
Community Discussion
No community discussion yet for this question.