AZ-900 Azure Identity and Security 3

Question 1

What is the core principle of the Zero Trust security model?

Accepted Answer

Never trust, always verify

Answer

Zero Trust assumes breach and verifies every request as though it originates from an untrusted network.

Question 2

Which Azure feature provides centralized, secure storage for secrets, keys, and certificates?

Accepted Answer

Azure Key Vault

Answer

Azure Key Vault securely stores and manages secrets, encryption keys, and certificates.

Question 3

What allows an Azure resource like a VM to authenticate to other services without storing credentials in code?

Accepted Answer

Managed identities

Answer

Managed identities let Azure resources authenticate to services automatically without managing credentials.

Question 4

Which concept describes one of the three pillars of Zero Trust regarding limiting user access?

Accepted Answer

Use least privilege access

Answer

Least privilege access grants users only the permissions they need to perform their tasks.

Question 5

What defense strategy uses multiple layers of security controls throughout an environment?

Accepted Answer

Defense in depth

Answer

Defense in depth applies layered security controls so that if one layer fails, others still protect resources.

AZ-900 Practice Test