Microsoft 365 Fundamentals MS-900 Practice Question

The correct answer is Verify explicitly. This is a core principle of the Zero Trust model which states that every access request must be authenticated and authorized using all available data points, including user identity, location, and device health. The motto is "never trust, always verify".

Assume breach is the principle of operating as if a breach has already occurred. This involves minimizing the impact of a breach by segmenting access and verifying end-to-end encryption.

Use least privilege access is the principle of providing users only the permissions they need (Just-Enough and Just-in-Time access) to complete a task.

Encrypting data in transit and at rest is a critical security practice and a component used to implement a Zero Trust strategy, but it is not one of the three core guiding principles.