SC-100 Certification Practice Question #160

Question

For a Microsoft cloud environment, you are designing a security architecture based on the Microsoft Cloud Security Benchmark.

What are three best practices for identity management based on the Azure Security Benchmark? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Accepted Answer

The Microsoft Cloud Security Benchmark (MCSB) v3 Identity Management domain lists exactly three controls whose titles match the answer options verbatim: IM-1 "Use centralized identity and authentication system" (E), IM-2 "Protect identity and authentication systems" (C), and IM-3 "Manage application identities securely and automatically" (A). Options B and D are real benchmark controls but live in the Privileged Access and Logging & Threat Detection domains respectively, so they are not identity-management best practices. The community's split (ABC/ABE/BCD) traces entirely to users referencing the older v2 list, where IM-1 was "Standardize Azure AD" and the "Protect identity and authentication systems" wording did not appear — corrected by AWSPro24 and Bravocado pointing to the v3 page. Confidence is held at 90 (not higher) because examtopics shows only "E" as the suggested answer, but MS Learn plus the dominant 15-vote ACE community consensus make ACE the authoritative multi-select.

More SC-100 practice questions