Hotspot Question A company is evaluating Microsoft 365. You need to identify Microsoft 365 security principles. Select the answer that correctly completes the sentence. Answer:

Question

Exhibit

Answer Area

• Verify explicitly, least privileged access, and assume breach are principles forMicrosoft Secure Score
  Zero TrustZero-day exploitMicrosoft Secure ScoreSecure by default

Explanation

The question tests understanding of the core principles of the Zero Trust security model, which are 'Verify explicitly', 'least privileged access', and 'assume breach'.

Approach. To answer correctly, the test-taker must select 'Zero Trust' from the dropdown menu. The phrases 'Verify explicitly', 'least privileged access', and 'assume breach' are the three foundational pillars of the Zero Trust security model. This model dictates that no user or device should be trusted by default, regardless of whether they are inside or outside the network perimeter. Instead, all access requests must be explicitly verified, granted with the minimum necessary privileges, and the system must always operate under the assumption that a breach could occur at any time.

Common mistakes.

• common_mistake. Other options are incorrect for the following reasons:
• Zero-day exploit: This refers to a software vulnerability that is unknown to the vendor and for which no patch exists, making it a type of threat, not a security principle or model.
• Microsoft Secure Score: This is a measurement tool within Microsoft 365 and Azure that evaluates an organization's security posture and provides recommendations for improvement. It is a metric and a set of recommendations, not a security principle itself.
• Secure by default: While a good security practice, 'Secure by default' implies that systems are shipped or configured with the most secure settings out-of-the-box. This is a design philosophy, but it does not encompass the specific operational and strategic principles of 'Verify explicitly, least privileged access, and assume breach' as comprehensively as Zero Trust does. These three principles are the defining characteristics of the Zero Trust model.

Concept tested. Understanding of the Zero Trust security model and its core principles (Verify explicitly, Least Privileged Access, Assume Breach). This is a fundamental concept in modern cybersecurity, particularly relevant in cloud environments like Microsoft 365.

Reference. https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-overview

No community discussion yet for this question.