SC-100 Question #80: Real Exam Question with Answer & Explanation

Question

You are designing the security standards for a new Azure environment. You need to design a privileged identity strategy based on the Zero Trust model. Which framework should you follow to create the design?

Options

• AEnhanced Security Admin Environment (ESAE)
• BMicrosoft Security Development Lifecycle (SDL)
• CRapid Modernization Plan (RaMP)
• DMicrosoft Operational Security Assurance (OSA)

Explanation

{"question_number": 8, "correct_answer": "C", "explanation": "The Rapid Modernization Plan (RaMP) (C) is Microsoft's recommended framework for designing a privileged identity strategy aligned with Zero Trust principles. RaMP provides a prioritized, actionable roadmap with specific milestones for quickly achieving Zero Trust security, including privileged access workstations, just-in-time access, and identity segmentation. It is the successor guidance to the older ESAE model. Enhanced Security Admin Environment (ESAE) (A) - also called the 'red forest' model - is Microsoft's legacy privileged access approach that is now deprecated in favor of RaMP. Microsoft Security Development Lifecycle (SDL) (B) is a software development process for building secure applications, not an identity strategy framework. Microsoft Operational Security Assurance (OSA) (D) focuses on operational security practices for running services, not specifically on privileged identity design.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.