SC-900 Microsoft Security, Compliance, and Identity Fundamentals Zero Trust Security Model 2

Question 1

Which Zero Trust guiding principle states that access should be limited to only what is needed to perform a task?

Accepted Answer

Use least privilege access

Answer

Verify explicitly

Answer

Assume breach

Answer

Segment networks

Question 2

In Zero Trust, what does 'assume breach' mean for network design?

Accepted Answer

Segment networks to contain blast radius

Answer

Disable all firewalls

Answer

Trust all internal traffic

Answer

Block all external connections

Question 3

Which Microsoft service helps implement Zero Trust by providing conditional access policies?

Accepted Answer

Microsoft Entra ID (Azure AD)

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Purview

Answer

Azure Firewall

Question 4

Zero Trust replaces which traditional security model?

Accepted Answer

Castle-and-moat (perimeter-based) model

Answer

Defense-in-depth model

Answer

Shared responsibility model

Answer

Zero-knowledge model

Question 5

Which pillar of Zero Trust focuses on protecting data through classification and encryption?

Accepted Answer

Data

Answer

Identities

Answer

Endpoints

Answer

Networks

Question 6

What technology enables Zero Trust by continuously verifying device health before granting access?

Accepted Answer

Device compliance policies

Answer

VPN tunneling

Answer

Static IP allowlisting

Answer

MAC address filtering

Question 7

In the Zero Trust model, how should applications be treated regardless of where they are hosted?

Accepted Answer

Verify every app request as if it comes from an untrusted network

Answer

Trust apps on corporate servers completely

Answer

Only monitor third-party apps

Answer

Grant admin access to all internal apps