Microsoft 365 Fundamentals MS-900 Practice Question

The Zero Trust model is the security approach that assumes no user or device is trusted by default, whether inside or outside the network. It requires continuous verification of identities, credentials, and device health before granting access to resources. This model reduces the risk of security breaches by enforcing strict access controls and minimizing implicit trust.

• Perimeter-based security relies on securing the network boundary and assumes that entities within the network are trusted, which does not account for internal threats.
• Role-Based Access Control assigns permissions based on user roles but doesn't inherently distrust all users and devices by default or require continuous verification.
• The Principle of Least Privilege ensures users have only the access necessary for their role but doesn't assume all entities are untrusted or enforce stringent verification for every access request.