Microsoft Cybersecurity Architect — Question 7

Your company is preparing for cloud adoption.
You are designing security for Azure landing zones.
Which two preventative controls can you implement to increase the secure score? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. Azure Web Application Firewall (WAF)
• B. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
• C. Microsoft Sentinel
• D. Azure Firewall
• E. Microsoft Defender for Cloud alerts

Correct answer: A, D

Explanation

The correct answers are A and D because both Azure Web Application Firewall (WAF) and Azure Firewall serve as preventative controls that enhance security by filtering and monitoring HTTP traffic and controlling network traffic, respectively. Options B, C, and E, while valuable for security management and alerts, do not directly serve as preventative controls to increase the secure score in the same manner.