You have a Microsoft 365 E5 subscription and an Azure subscription. You need to recommend a solution to enforce the Zero Trust principle of explicit verification for the subscriptions. The solution…

The correct answer is A. Conditional Access. The correct answer is A: Conditional Access. The Microsoft Cybersecurity Reference Architectures (MCRA) explicitly maps Conditional Access to the Zero Trust principle of 'Verify Explicitly.' This principle requires that every access request be authenticated and authorized using…

Design solutions that align with security best practices and priorities

Question

You have a Microsoft 365 E5 subscription and an Azure subscription. You need to recommend a solution to enforce the Zero Trust principle of explicit verification for the subscriptions. The solution must be based on Zero Trust guidance in the Microsoft Cybersecurity Reference Architectures (MCRA). What should you include in the recommendation?

Options

AConditional Access
BMicrosoft Defender for Identity
CMicrosoft Defender for Cloud
DMicrosoft Entra ID Identity Governance

How the community answered

(29 responses)

A
72% (21)
B
17% (5)
C
3% (1)
D
7% (2)

Explanation

The correct answer is A: Conditional Access. The Microsoft Cybersecurity Reference Architectures (MCRA) explicitly maps Conditional Access to the Zero Trust principle of 'Verify Explicitly.' This principle requires that every access request be authenticated and authorized using all available signals-identity, device compliance, location, application, data sensitivity, and anomaly detection-before granting access. Conditional Access is the policy engine that evaluates these signals in real time and enforces access controls for both M365 and Azure resources. Defender for Identity (B) focuses on detecting identity-based attacks, not enforcing access policy. Defender for Cloud (C) handles cloud workload security posture. Entra ID Governance (D) addresses identity lifecycle management, which maps to the Zero Trust 'Use Least Privilege Access' principle, not 'Verify Explicitly.'

Topics

#Zero Trust#Explicit Verification#Conditional Access#Identity and Access Management

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice