SC-100 Certification Practice Question #117

Question

You have a Microsoft 365 E5 subscription and an Azure subscription.

You need to recommend a solution to enforce the Zero Trust principle of explicit verification for the subscriptions. The solution must be based on Zero Trust guidance in the Microsoft Cybersecurity Reference Architectures (MCRA).

What should you include in the recommendation?

Accepted Answer

The Zero Trust "verify explicitly" principle means every access request must be authenticated and authorized using all available signals. Per MCRA and Microsoft's Zero Trust guidance, Conditional Access is the policy-enforcement engine that performs this real-time authentication/authorization in Microsoft Entra ID — it is literally at the center of the Zero Trust architecture diagram. The other options support Zero Trust but do not enforce explicit verification: Defender for Identity and Defender for Cloud generate signals/detections (data points), and Entra ID Identity Governance addresses least-privilege/access lifecycle. Suggested Answer, Most Voted (6 votes), the highest-voted comment (Luweho, with a direct MS Learn quote), and MS Learn all converge on A, so confidence is high with only a single low-vote dissent.

More SC-100 practice questions