SC-900 - Microsoft Security, Compliance, and Identity Fundamentals Zero Trust Security Model Questions and Answers

Question 1

Which of the following is a core guiding principle of the Zero Trust security model?

Accepted Answer

Assume breach

Answer

Trust but verify

Answer

Perimeter-based security

Answer

Implicit trust for internal networks

Question 2

A company is implementing a Zero Trust strategy. They want to ensure that users are only granted the absolute minimum permissions required to perform their job functions. Which Zero Trust principle does this directly support?

Accepted Answer

Use least privileged access

Answer

Verify explicitly

Answer

Assume breach

Answer

Defense-in-depth

Question 3

In a Zero Trust model, what is the primary assumption made about network location?

Accepted Answer

No network location, internal or external, is implicitly trusted.

Answer

Requests from the corporate office are inherently trusted.

Answer

Devices on the internal network are secure by default.

Answer

External networks are untrusted, while internal networks are trusted.

Question 4

A security administrator is configuring access policies. According to the Zero Trust principle of 'Verify explicitly', which of the following signals should be used to inform an access decision?

Accepted Answer

The user's identity, device health, and location.

Answer

Only the user's password.

Answer

Only the user's group membership.

Answer

Whether the user is inside the corporate firewall.

Question 5

A company has successfully implemented strong multi-factor authentication for all users. Which statement best describes their progress toward a complete Zero Trust model?

Accepted Answer

They have implemented a key component of the 'Identities' pillar, but more is needed.

Answer

They have fully implemented Zero Trust.

Answer

They have completed the 'Assume breach' principle.

Answer

They have addressed network security, but not identity.

Question 6

Which of the following actions is a direct application of the 'Assume breach' principle in a Zero Trust model?

Accepted Answer

Segmenting networks to limit lateral movement.

Answer

Implementing multi-factor authentication for all users.

Answer

Assigning global administrator roles to all IT staff.

Answer

Trusting all devices that are owned by the corporation.