Noos
PT EN
RAN-AZ900-00195
Ranvier · AZ900

Exam AZ900 Topics: architecture Difficulty: easy

An insurance carrier's security office publishes a new access policy: always authenticate and authorize every request based on all available data, grant only just-enough access for the task at hand, and plan as if attackers are already inside the environment. Which security model does this policy describe?

Options (Reading Mode) Click to filter discussion →
  1. A. The Zero Trust model, built on verifying explicitly, using least privilege access, and assuming breach
  2. B. The defense-in-depth model, built on a single hardened perimeter around the network
  3. C. The shared responsibility model, splitting duties between the consumer and the cloud provider
  4. D. The single sign-on model, letting one authentication reach many applications
Reveal answer

Correct answer: The Zero Trust model, built on verifying explicitly, using least privilege access, and assuming breach

Reference: https://learn.microsoft.com/en-us/training/modules/describe-azure-identity-access-security/7-describe-zero-trust-model

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (A): The Zero Trust model, built on verifying explicitly, using least privilege access, and assuming breach

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.