SC-100 Certification Practice Question #12

Question

You are designing the security standards for a new Azure environment.
You need to design a privileged identity strategy based on the Zero Trust model.
Which framework should you follow to create the design?

Accepted Answer

The question asks for the framework to design a Zero Trust privileged identity strategy. MS Learn presents the Rapid Modernization Plan (RaMP) as Microsoft's recommended path to "quickly adopt the recommended privileged access strategy," explicitly built on Zero Trust (explicit validation, least privilege, assume breach). SDL (A) and OSA (D) are software-development and operational-security-assurance frameworks, not privileged-access design. ESAE (B) — the legacy "Red Forest" tiered admin model — has been formally retired and replaced by the modern privileged access strategy and RaMP, which even the dissenting commenter (Ario) later conceded. Suggested Answer, Most Voted (28), and the top Highly Voted comment all agree with MS Learn, so confidence is high; a few points are withheld for the legacy ESAE dissent.

More SC-100 practice questions