In the Zero Trust model, what is the default stance toward network location?

Only requests from known IP addresses are allowed

Location is irrelevant; all requests are treated equally

Requests from inside the corporate network are automatically trusted

Requests from the internet are blocked by default

Which of the following is an example of a compliance requirement?

A company policy requiring employees to use strong passwords

A law requiring organizations to protect personal data of EU citizens

A recommendation to conduct regular security audits

A best practice to encrypt data in transit

Which principle is central to the Zero Trust security model?

Rely on the network perimeter as the primary security boundary

Verify explicitly every access request

Use a single strong password for all systems

Trust everything inside the network perimeter

A company is designing a security architecture for a new application. They want to ensure that if one security control fails, other controls still protect the system. Which approach should they adopt?

Disable all logging to reduce the attack surface

Rely on a single strong firewall to block all attacks

Implement multiple layers of security controls across physical, network, and application levels

Use only encryption to protect all data

What is the primary purpose of IT governance?

To reduce the cost of IT services

To ensure IT investments support business objectives

To manage day-to-day IT operations

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 1Objective 1

Describe Security and Compliance Concepts SC-900 Practice Questions (Page 10)

Part of the Describe the concepts of security, compliance, and identity domain, which accounts for 10–15% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~2–5 in this domain), expect 1–3 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

10–15%of the exam

Questions 46–50

46foundation · easy
In the Zero Trust model, what is the default stance toward network location?
Select an answer first
47foundation · easy
Which of the following is an example of a compliance requirement?
Select an answer first
48foundation · easy
Which principle is central to the Zero Trust security model?
Select an answer first
49application · medium
A company is designing a security architecture for a new application. They want to ensure that if one security control fails, other controls still protect the system. Which approach should they adopt?
Select an answer first
50foundation · easy
What is the primary purpose of IT governance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.