Noos
PT EN
RAN-AZ900-00196
Ranvier · AZ900

Exam AZ900 Topics: architecture Difficulty: hard

A field-services company lets technicians reach work apps from their own phones and home networks. Under the company's new Zero Trust policy, how is a sign-in like this one — from an unmanaged device on a public network — handled?

Options (Reading Mode) Click to filter discussion →
  1. A. It is allowed without further checks, because it arrives through the company VPN tunnel from a known network
  2. B. It is assessed on identity, device, and risk signals, then allowed, challenged for MFA, or blocked accordingly
  3. C. It bypasses authentication whenever the target application is classified as low-risk, since trusted users are assumed safe
  4. D. It is blocked outright, because Zero Trust only allows sign-ins from managed devices on the corporate network
Reveal answer

Correct answer: It is assessed on identity, device, and risk signals, then allowed, challenged for MFA, or blocked accordingly

Reference: https://learn.microsoft.com/en-us/training/modules/describe-azure-identity-access-security/7-describe-zero-trust-model

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (B): It is assessed on identity, device, and risk signals, then allowed, challenged for MFA, or blocked accordingly

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.