SC-900 Microsoft Security, Compliance, and Identity Fundamentals Zero Trust Security Model 5

Question 1

Which of the following is a Zero Trust Infrastructure pillar control?

Accepted Answer

Assessing the configuration and behavior of cloud workloads

Answer

The Infrastructure pillar focuses on assessing the security posture of servers, VMs, containers, and cloud workloads to detect and respond to threats.

Question 2

Why is encryption considered essential to Zero Trust data protection?

Accepted Answer

It ensures data remains protected even if it is accessed without authorization

Answer

Encryption ensures that even if data is accessed by unauthorized parties, it cannot be read, which is a key data protection control in Zero Trust.

Question 3

What is the relationship between Zero Trust and the shared responsibility model in cloud computing?

Accepted Answer

Zero Trust provides the security strategy customers apply within their shared responsibility scope

Answer

Zero Trust is the security strategy organizations apply to fulfill their side of the shared responsibility model in cloud environments.

Question 4

Which action aligns with the Zero Trust principle of 'use least privilege access' for an HR employee?

Accepted Answer

Grant access only to the HR database required for their role

Answer

Granting an HR employee access only to the HR database they need aligns with least privilege by limiting permissions to role-specific resources.

Question 5

How does Zero Trust address shadow IT (unauthorized cloud apps used by employees)?

Accepted Answer

Uses cloud app discovery and access controls to manage and restrict unsanctioned apps

Answer

Zero Trust addresses shadow IT through cloud app discovery tools like Microsoft Defender for Cloud Apps to identify and control unsanctioned application usage.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Zero Trust Security Model 5