Question
You are planning the security levels for a security access strategy.
You need to identify which job roles to configure at which security levels. The solution must meet security best practices of the Microsoft Cybersecurity Reference Architectures (MCRA).
Which security level should you configure for each job role? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
Developer: Specialized security. In Microsoft's privileged access strategy (part of MCRA), specialized security provides increased controls for roles with elevated business impact, such as developers and those who handle sensitive data or systems.
Standard user: Enterprise security. Enterprise security is the baseline level for all users and productivity scenarios, using standard controls such as MFA and compliant devices.
IT administrator: Privileged security. Privileged security is the highest level, for IT administrators and other roles that can cause a significant incident through control of systems, typically with privileged access workstations and just-in-time access.
