Question 44

Explanation

Defense in depth uses a layered approach to security to reduce the chances of a successful attack. You can use different Azure services/activities to safeguard access to your data/configuration at different layers (Refer to the below image).

Option Defense in depth is the correct choice.

Reference Link: https://docs.microsoft.com/en-us/learn/modules/describe-security-concepts-methodologies/4-describe-defense-depth

CIA refers to principles (Confidentiality, Integrity, Availability) that help define a security posture. CIA does not provide a layered approach to security although, each of the defense in depth layers (see above) implements a CIA principle.

For example, the Physical security layer implements the Confidentiality principle because it grants access only to authorized personnel.

The Identity & Access layer implements the Integrity principle because it gives access only after verifying who the user they claim to be.

And so on.

Option CIA model is incorrect.

Reference Link: https://docs.microsoft.com/en-us/learn/modules/azure-well-architected-security/2-defense-in-depth#defense-in-depth-a-layered-approach-to-security

https://docs.microsoft.com/en-us/learn/modules/describe-security-concepts-methodologies/4-describe-defense-depth#confidentiality-integrity-availability-cia

The Zero Trust assumes that everything (both inside and outside of your network perimeter) is an untrusted network. By trusting no one, we enhance security. It is an incorrect choice.

Reference Link: https://docs.microsoft.com/en-us/learn/modules/describe-security-concepts-methodologies/2-describe-zero-trust-methodology

The shared responsibility model identifies security tasks controlled by the cloud provider and the tasks handled by the organization (you). It is an incorrect choice too.

Reference Link: https://docs.microsoft.com/en-us/learn/modules/describe-security-concepts-methodologies/3-describe-shared-responsibility-model