SC-100 Security Strategy & Risk Management 2

Question 1

A cybersecurity architect is designing a risk management framework for a multinational organization. Which approach best aligns with the NIST Cybersecurity Framework's 'Identify' function for asset management?

Accepted Answer

Creating a comprehensive inventory of hardware, software, and data assets with ownership assignments

Answer

The NIST CSF 'Identify' function requires establishing an asset inventory with clear ownership to understand the organizational context and cybersecurity risk.

Question 2

An organization wants to prioritize security investments using a quantitative risk approach. Which metric best represents the annualized financial impact of a specific threat?

Accepted Answer

Annualized Loss Expectancy (ALE)

Answer

ALE = Single Loss Expectancy × Annual Rate of Occurrence and quantifies the yearly expected financial loss from a specific risk scenario.

Question 3

A security architect needs to recommend a risk treatment strategy for a legacy system that cannot be patched and hosts low-sensitivity data. Which treatment is MOST appropriate?

Accepted Answer

Risk acceptance with documented compensating controls and monitoring

Answer

Risk acceptance with compensating controls is appropriate when the cost of other treatments exceeds the risk value, which is common for low-sensitivity legacy systems.

Question 4

When integrating security strategy with business objectives, which approach does Microsoft recommend for aligning security with organizational priorities?

Accepted Answer

Establishing a Business Information Security Officer (BISO) role embedded within business units

Answer

Microsoft recommends embedding BISOs within business units to bridge security strategy with business objectives and ensure security enables rather than blocks business.

Question 5

An organization is implementing the Zero Trust model. Which principle addresses the risk of lateral movement after a breach?

Accepted Answer

Assume breach and minimize blast radius through segmentation

Answer

The 'Assume Breach' principle drives segmentation, least privilege, and end-to-end encryption to limit an attacker's ability to move laterally after initial compromise.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Security Strategy & Risk Management 2