Microsoft Security Fundamentals (SC-900) Flashcards

What is the Zero Trust security model based on?

Answer: Never trust, always verify — assuming breach and verifying every request explicitly

Zero Trust assumes no user or device is trusted by default, requiring continuous verification of identity and device health before granting access.

What does Multi-Factor Authentication (MFA) add to the sign-in process?

Answer: A second verification method beyond just a password, such as a phone app or SMS code

MFA requires users to prove their identity with at least two factors — something they know (password) plus something they have (phone) or are (biometric).

Which Microsoft service provides identity protection by detecting risky sign-ins and compromised accounts?

Answer: Microsoft Entra ID Protection

Microsoft Entra ID Protection uses machine learning to detect suspicious sign-in behaviors and user risk conditions, enabling automated remediation policies.

What is Conditional Access in Microsoft Entra ID?

Answer: Policies that grant or block access based on conditions like user location, device state, and app being accessed

Conditional Access policies evaluate signals like user identity, device compliance, location, and application to make access decisions in real time.

What is the principle of 'Least Privilege' in security?

Answer: Granting users only the minimum permissions necessary to perform their job functions

Least Privilege limits user access rights to only what is strictly required for their role, reducing the attack surface if credentials are compromised.

Which Microsoft tool is a cloud-native SIEM and SOAR solution for detecting and responding to security threats?

Answer: Microsoft Sentinel

Microsoft Sentinel is a cloud-native SIEM and SOAR platform that collects security data across the enterprise, detects threats using analytics, and automates responses.