Microsoft Security, Compliance, and Identity Fundamentals (SC-900) - 340 Questions

1. A company is implementing a Zero Trust security strategy. Which principle requires that organizations verify every request as though it originates from an untrusted network, using all available data points such as user identity, location, device health, and the resource being accessed?

2. A security architect is designing a cloud environment using Zero Trust principles. The architect wants to ensure that if one segment of the network is compromised, the damage is contained and cannot easily spread. Which Zero Trust principle directly supports this goal?

3. An organization is moving from a traditional perimeter-based security model to Zero Trust. In the traditional model, users inside the corporate network were trusted by default. What does Zero Trust replace this model with?

4. A company uses a SaaS application hosted by a cloud provider. According to the shared responsibility model for SaaS, which security responsibility remains with the customer?

5. A company is deploying virtual machines in an IaaS cloud environment. According to the shared responsibility model, which of the following is the customer's responsibility?