Practice question 498 of 498 · hard
A hybrid enterprise allows remote administrators to reach a critical application. It wants Zero Trust protection when an endpoint or credential is compromised. Which THREE design elements form complementary controls? Select THREE.
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Verify identity and relevant device or risk context for supported access paths
- Collect actionable telemetry and retain independently protected recovery capability
- Restrict administrative permissions and segment access to the specific required systems
Verify identity and relevant device or risk context for supported access paths: Explicit verification evaluates the requesting principal and context. Restrict administrative permissions and segment access to the specific required systems: Least privilege and segmentation constrain an established compromise. Collect actionable telemetry and retain independently protected recovery capability: Assume breach requires detection, containment, and recoverability. Trust all requests after they pass through a corporate tunnel: Network origin is insufficient trust evidence. Use device compliance to grant unrestricted database access automatically: A posture signal does not establish all resource entitlements. Use one unrestricted administrator for production and all recovery controls: Concentrated authority increases the effect of compromise.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.