A company uses Microsoft cloud services. The company needs to protect against security breaches. You need to follow Microsoft's approach to security. Which approach should you use?

Claiming security will never be breached for specific applications is unrealistic and contradicts Microsoft's Zero Trust 'assume breach' philosophy, which acknowledges that no application is inherently immune.

Assuming the perimeter network will never be breached is the old 'castle-and-moat' security model that Microsoft's Zero Trust framework explicitly moves away from.

Assuming security will never be breached at any level is a false and dangerous assumption that Zero Trust directly opposes by mandating continuous verification and breach readiness.

Limiting breach assumptions only to the perimeter network is a partial and outdated approach that ignores internal threats and lateral movement, which Zero Trust's assume breach principle addresses holistically.

Microsoft's security approach follows the 'Assume Breach' principle, one of the three core tenets of Zero Trust (alongside 'Verify Explicitly' and 'Use Least Privilege Access'). By assuming breach, organizations design security controls, monitoring, and response strategies as if attackers are already inside the network, minimizing blast radius and improving detection and response capabilities.