SC-900 Microsoft Security, Compliance, and Identity Fundamentals Zero Trust Security Model 4

Question 1

Which Zero Trust pillar is addressed when implementing Azure Private Link to restrict access to Azure services?

Accepted Answer

Networks

Answer

Azure Private Link restricts Azure service access to private network connections, directly supporting the Zero Trust Networks pillar.

Question 2

Multi-factor authentication (MFA) is a core Zero Trust control that primarily strengthens which pillar?

Accepted Answer

Identities

Answer

MFA strengthens the Identities pillar by adding additional verification factors beyond passwords, reducing the risk of compromised credentials.

Question 3

What does Zero Trust mean by 'never trust, always verify'?

Accepted Answer

No user or device is trusted automatically, even on the internal network

Answer

Zero Trust's 'never trust, always verify' means that trust is never implicit—every access request must be authenticated and authorized regardless of origin.

Question 4

Which feature in Microsoft Entra ID provides risk-based Zero Trust enforcement by detecting suspicious sign-in behaviors?

Accepted Answer

Identity Protection

Answer

Microsoft Entra ID Protection uses machine learning to detect risky sign-ins and users, triggering step-up authentication or access blocks.

Question 5

How does Zero Trust handle east-west traffic (traffic between internal servers)?

Accepted Answer

Inspects and controls it the same as north-south traffic

Answer

Zero Trust treats east-west (lateral) traffic with the same scrutiny as north-south traffic because threats can originate from inside the network.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Zero Trust Security Model 4