SC-900 Microsoft Security, Compliance, and Identity Fundamentals Zero Trust Security Model 2

Question 1

Which Zero Trust guiding principle states that access should be limited to only what is needed to perform a task?

Accepted Answer

Use least privilege access

Answer

The 'Use least privilege access' principle limits user access with just-in-time and just-enough-access policies to minimize exposure.

Question 2

In Zero Trust, what does 'assume breach' mean for network design?

Accepted Answer

Segment networks to contain blast radius

Answer

Assuming breach means designing networks with segmentation so that if one area is compromised, attackers cannot move freely to other areas.

Question 3

Which Microsoft service helps implement Zero Trust by providing conditional access policies?

Accepted Answer

Microsoft Entra ID (Azure AD)

Answer

Microsoft Entra ID provides Conditional Access policies that enforce Zero Trust by evaluating signals before granting access.

Question 4

Zero Trust replaces which traditional security model?

Accepted Answer

Castle-and-moat (perimeter-based) model

Answer

Zero Trust replaces the castle-and-moat model where everything inside the network perimeter was trusted by default.

Question 5

Which pillar of Zero Trust focuses on protecting data through classification and encryption?

Accepted Answer

Data

Answer

The Data pillar in Zero Trust focuses on classifying, labeling, and encrypting data and controlling access based on data sensitivity.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test