Compliance

Which of the following are principles of the Zero Trust model?

Select all that apply.

• Verify explicitly

• Block access

• Least privileged access

• Assume breach

The shared responsibility model identifies which security tasks are handled by the cloud provider, and which are handled by you, the customer. The responsibilities vary depending on where the workload is hosted. Which approach places more responsibility on the cloud provider?

Select the correct option.

• On-premises datacenter

• Infrastructure as a service (IaaS)

• Software as a service (SaaS)

• Platform as a service (PaaS)

Consider the shared responsibility model―in which approach does the customer own the security tasks related with information and data, devices, and accounts and identities?

Select the correct option.

• On-premises datacenter

• Infrastructure as a service (IaaS) and platform as a service (PaaS)

• Software as a service (SaaS)

• All the above (correct answer)

The HTTPS protocol is an example of which type of encryption?

Select the correct option.

• Encryption in transit

• Encryption at rest

• No encryption

• Hashing

What is the term used to describe the process for verifying the identity of an object, service, or person?

Select the correct option.

• Authorization

• Authentication

• Auditing

• Administration

What are the external identity types supported by Microsoft Entra?

Select all that apply.

• B2B

• B2C

• Device identity

• Application identity

Which of the following verification methods can be used with Microsoft Entra multifactor authentication?

Select all that apply.

• Microsoft Authenticator app

• SMS

• Voice call

• Security questions

Self-service password reset (SSPR) works in which of the following scenarios?

Select all that apply.

• Password change

• Password reset

• Account unlock

• All the above

Which of the following are signals that can be used by Conditional Access?

Select all that apply.

• Named location information

• User risk

• User or group membership

• All the above

How does Privileged Identity Management (PIM) mitigate the risks of excessive, unnecessary, or misused access permissions to Azure resources and Microsoft Entra?

Select all that apply.

• Time-based role activation

• Approval-based role activation

• Password-based role activation

• Risk-based role activation