SC-100 Certification Practice Question #20

Question

29 DRAG DROP

For a Microsoft cloud environment, you need to recommend a security architecture that follows the Zero Trust principles of the Microsoft Cybersecurity Reference Architectures (MCRA).

Which security methodologies should you include in the recommendation? To answer, drag the appropriate methodologies to the correct principles. Each methodology may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Accepted Answer

Every Microsoft Zero Trust article states the three principles with the exact keywords that resolve this drag-drop: *Verify explicitly* is defined as authorizing on all data points "including… data classification"; *Use least privilege access* is defined as "Just-In-Time and Just-Enough-Access (JIT/JEA)"; *Assume breach* is defined as "Minimize blast radius and segment access." Mapping each slot to the tile that literally appears in its MS Learn definition gives Segmenting access / Data classification / JIT access, leaving Business continuity unused. This matches the four highest-voted comments. The minority that places "Business continuity → Assume breach" conflates the MCRA slide's "business enablement / continuity" language with the canonical Zero Trust principle wording — alessag explicitly challenges that conflation — and there is no "business continuity" keyword in any of Microsoft's three principle definitions, so it is discounted. Confidence is 88% (strong, image-resolved drag-drop) rather than higher because the page carries no official answer key.

More SC-100 practice questions