SC-900 Describe security, compliance concepts

A cloud administrator needs to verify explicitly in Zero Trust.

Multiple choice — select one answer

Answer choices

  1. a. Layered controls across identity, network, data
  2. b. Disable logging (not recommended for production workloads)
  3. c. Grant minimum permissions required
  4. d. Always authenticate and authorize

Architectural breakdown & explanation

Zero Trust assumes breach and verifies every request.

Correct answer(s): d. Always authenticate and authorize

Exam domain: Describe security, compliance concepts (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Microsoft Security, Compliance, and Identity Fundamentals bank. Run a full timed practice exam with domain-weighted random questions in your browser.