Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

The requirement to assess every access attempt based on multiple signals (identity, device health, location, etc.) illustrates the Verify explicitly principle. Zero Trust stresses three core principles: Verify explicitly, Use least-privileged access, and Assume breach. While least-privileged access limits permissions after authentication and assume breach prepares for compromise, only verify explicitly mandates rigorous, signal-based authentication and authorization for each request. Segmenting by network zone can be part of a Zero Trust architecture, but it is not one of the three core principles.