Question
You are designing the security standards for a new Azure environment.
You need to design a privileged identity strategy based on the Zero Trust model.
Which framework should you follow to create the design?
- A. Microsoft Security Development Lifecycle (SDL)
- B. Enhanced Security Admin Environment (ESAE)
- C. Rapid Modernization Plan (RaMP) Correct
- D. Microsoft Operational Security Assurance (OSA)
Explanation
The Rapid Modernization Plan (RaMP) is Microsoft's recommended approach for quickly adopting the privileged access strategy aligned with the Zero Trust model. The Security Development Lifecycle (SDL) covers secure software development and Operational Security Assurance (OSA) covers secure operation of online services, so neither is a privileged access framework. The Enhanced Security Admin Environment (ESAE) is a legacy approach that Microsoft has retired in favour of the modern privileged access strategy and RaMP.