SC-100 Zero Trust Architecture 2

Question 1

In a Zero Trust model, which principle ensures that users and devices are only granted access to the specific resources they need to perform their job functions?

Accepted Answer

Least privilege access

Answer

Least privilege access restricts users and devices to only the minimum permissions required for their specific tasks, reducing the attack surface.

Question 2

Which Microsoft service provides the identity plane for Zero Trust by enabling conditional access policies based on user, device, location, and risk signals?

Accepted Answer

Azure Entra ID (Azure AD)

Answer

Azure Entra ID serves as the identity control plane for Zero Trust, enabling conditional access policies that evaluate multiple risk signals before granting access.

Question 3

A company wants to apply Zero Trust principles to its network layer. Which Azure service allows micro-segmentation by filtering traffic between Azure resources at the subnet level?

Accepted Answer

Network Security Groups (NSGs)

Answer

Network Security Groups enable micro-segmentation by applying inbound and outbound traffic rules at the subnet or NIC level within Azure virtual networks.

Question 4

When designing a Zero Trust strategy, 'assume breach' means an architect should:

Accepted Answer

Design systems with the expectation that attackers may already be inside the network

Answer

The 'assume breach' principle means designing architecture as if attackers may already be present, focusing on detection, containment, and minimizing blast radius.

Question 5

Which Zero Trust pillar focuses on classifying, labeling, and protecting sensitive information regardless of where it resides or travels?

Accepted Answer

Data

Answer

The Data pillar of Zero Trust focuses on protecting sensitive data through classification, labeling, and encryption wherever it resides or moves.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Zero Trust Architecture 2