Microsoft 365 Fundamentals MS-900 Practice Question

The Zero Trust Model requires all access requests to be authenticated and authorized, regardless of network location, enforcing least-privilege access and assuming that breaches will occur. This aligns with the organization's described approach.

The Perimeter-Based Security Model trusts internal network traffic, which does not meet the requirement to authenticate all requests.

The Trust but Verify Model suggests initial trust with subsequent verification, not constant authentication.

The Defense in Depth model involves multiple layers of security but does not specifically require authenticating every access request regardless of location.