Correct Answer:

Box 1: Yes Box 2: Yes Box 3: No

The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.

Reference:

https://docs.microsoft.com/en-us/security/zero-trust/

Correct Answer:

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/threat-analytics?view=o365-worldwide

Correct Answer:

Correct Answer:

Box 1: No

Software tokens is a time-based one-time passcodes (TOTP) solution.

Microsoft Authenticator, which is a passwordless solution, uses software tokens though.

Note: Authentication methods in Azure Active Directory - OATH tokens

OATH TOTP (Time-based One Time Password) is an open standard that specifies how one-time password (OTP) codes are generated. OATH TOTP can be implemented using either software or hardware to generate the codes. Azure AD

doesn't support OATH HOTP, a different code generation standard.

OATH software tokens

Software OATH tokens are typically applications such as the Microsoft Authenticator app and other authenticator apps. Azure AD generates the secret key, or seed, that's input into the app and used to generate each OTP.

Box 2: Yes

Each organization has different needs when it comes to authentication. Microsoft global Azure and Azure Government offer the following three passwordless authentication options that integrate with Azure Active Directory (Azure AD):

Windows Hello for Business

Microsoft Authenticator

FIDO2 security keys

Box 3: Yes

Reference:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-oath-tokens

Correct Answer:

Correct Answer: AB

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-learn-about?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

Correct Answer: D

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection?view=o365-worldwide

Correct Answer: A

https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide#assessments An assessment is grouping of controls from a specific regulation, standard, or policy.

Correct Answer: B

Conditional Access session controls enable user app access and sessions to be monitored and controlled in real time based on access and session policies. Based on this definition, the best answer for your question is B. enable limited experiences, such as blocking download of sensitive information. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/conceptconditional-access-session

Correct Answer: B

When using a user-assigned managed identity, you assign the managed identity to the "source" Azure Resource, such as a Virtual Machine, Azure Logic App or an Azure Web App.

What should you use to associate the same identity to more than one Azure virtual machine? User assigned managed identities can be used on more than one resource.

Reference: https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview