SC-900 Describe security, compliance concepts

For a hybrid workload, you should describe defense in depth.

Multiple choice — select one answer

Answer choices

  1. a. Always authenticate and authorize
  2. b. Grant minimum permissions required
  3. c. Hope (not recommended for production workloads)
  4. d. Layered controls across identity, network, data

Architectural breakdown & explanation

Layers reduce single points of failure.

Correct answer(s): d. Layered controls across identity, network, data

Exam domain: Describe security, compliance concepts (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Microsoft Security, Compliance, and Identity Fundamentals bank. Run a full timed practice exam with domain-weighted random questions in your browser.