SC-900 Microsoft Security, Compliance, and Identity Fundamentals Zero Trust Security Model 3

Question 1

Which Zero Trust signal is evaluated when a user attempts to access a resource from an unfamiliar location?

Accepted Answer

User location and IP address

Answer

User location and IP address are key signals evaluated in Zero Trust to detect anomalous access patterns and enforce conditional access.

Question 2

Just-in-time (JIT) access is a Zero Trust practice primarily used to manage which type of accounts?

Accepted Answer

Privileged administrator accounts

Answer

JIT access grants privileged administrator accounts elevated permissions only when needed and for a limited time, reducing standing access risk.

Question 3

Which Microsoft Defender product aligns with the Zero Trust 'Endpoints' pillar?

Accepted Answer

Microsoft Defender for Endpoint

Answer

Microsoft Defender for Endpoint protects devices and provides health signals used to enforce Zero Trust endpoint compliance.

Question 4

What is the purpose of microsegmentation in a Zero Trust network architecture?

Accepted Answer

Isolate workloads to prevent lateral movement

Answer

Microsegmentation divides the network into small zones so that even if an attacker gains access, they cannot move laterally to other segments.

Question 5

Which of the following best describes 'verify explicitly' in Zero Trust?

Accepted Answer

Always authenticate and authorize using all available data points

Answer

Verify explicitly means always authenticate and authorize based on all available data points including identity, location, device, and behavior.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test