MS-900 · Question #341
Hotspot Question A company is evaluating Microsoft 365. You need to describe Microsoft 365 security principles. Select the answer that correctly completes the sentence. Answer:
The correct answer is The model that assumes a security breach from an uncontrolled network is: Zero Trust. The question tests the understanding of Microsoft 365 security principles, specifically identifying the Zero Trust model based on its core assumption of a security breach from any network.
Question
Exhibit
Answer Area
- The model that assumes a security breach from an uncontrolled network isZero TrustZero TrustSecure by defaultZero daySecure score
Explanation
The question tests the understanding of Microsoft 365 security principles, specifically identifying the Zero Trust model based on its core assumption of a security breach from any network.
Approach. The correct interaction is to select "Zero Trust" from the provided options.
Common mistakes.
- common_mistake. Selecting "Secure by default", "Zero day", or "Secure score".
- Secure by default. This principle refers to the idea that products and services should come with secure configurations enabled out-of-the-box, minimizing the attack surface. While a good security practice, it does not explicitly define a model that assumes breaches from uncontrolled networks; rather, it aims to prevent them by starting from a strong security posture.
- Zero day. A "zero-day" is a previously unknown software vulnerability that hackers can exploit, or the attack that exploits it. It describes a type of threat or vulnerability, not a security model that defines an organizational approach to network trust.
- Secure score. Microsoft Secure Score is a measurement of an organization's security posture, providing recommendations and a numerical score to track improvements. It is a tool for assessing and improving security, not a fundamental security model that assumes breaches from uncontrolled networks.
Concept tested. The Zero Trust security model, its core principles, and its application in modern cybersecurity, particularly within the context of Microsoft 365 security. It tests the ability to differentiate Zero Trust from other security concepts and terms.
Topics
Community Discussion
No community discussion yet for this question.
