Microsoft Certified: Cybersecurity Architect Expert

Q_01 domain/d1 · medium multi discuss →

A security architect must decide where to focus limited resources when modernizing an organization's security architecture. Leadership wants a repeatable, evidence-based way to choose which risks to mitigate first. According to Microsoft guidance on data-driven prioritization, which three factors should drive that prioritization?

A Cheap, easy, and reliable attacks that adversaries are most likely to succeed with
B The number of security tools currently deployed across the estate
C Business impact, prioritizing defenses for the highest-value assets
D Effective and efficient mitigations that reduce risk quickly and measurably
E The age of the oldest hardware in the on-premises data center

Q_02 domain/d1 · medium single discuss →

An organization currently relies heavily on network ACLs and perimeter firewalls as its primary trust control. A security architect wants to justify a shift toward identity-based access. Applying both the immutable laws of security and the laws of cybersecurity risk together, which principle best supports reducing dependency on network trust as the primary control plane?

A Encrypted data is only as secure as its decryption key, so all traffic should be encrypted first
B Your network isn't as trustworthy as you think it is, so trust decisions should shift to identity, device, and application context
C An out-of-date antimalware scanner is marginally better than none
D Absolute anonymity isn't achievable, so visibility is unavoidable