Microsoft 365 Fundamentals MS-900 Practice Question

Zero Trust follows the principle of "never trust, always verify." Every access request-whether from inside or outside the corporate network-must be explicitly authenticated and authorized based on real-time signals before access is granted. This continuous verification enforces least-privilege access and assumes potential breach, so no user or device is implicitly trusted by default. Options that grant automatic trust to internal users or allow one-time authentication without further checks conflict with Zero Trust principles of verify explicitly, use least-privilege access, and assume breach.