SC-900 Describe security, compliance concepts

Which Azure offering should you use to verify explicitly in Zero Trust?

Multiple choice — select one answer

Answer choices

  1. a. Always authenticate and authorize
  2. b. Disable logging (not recommended for production workloads)
  3. c. Layered controls across identity, network, data
  4. d. Grant minimum permissions required

Architectural breakdown & explanation

Zero Trust assumes breach and verifies every request.

Correct answer(s): a. Always authenticate and authorize

Exam domain: Describe security, compliance concepts (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Microsoft Security, Compliance, and Identity Fundamentals bank. Run a full timed practice exam with domain-weighted random questions in your browser.