Practice question 44 of 498 · medium
A cloud-administration role is assigned permanently to all developers although only a small group occasionally performs approved changes. Which design better aligns with Zero Trust?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Limit eligible roles, scope, activation duration, and approval to the actual administrative need
Limit eligible roles, scope, activation duration, and approval to the actual administrative need: This reduces standing and excessive authority while supporting required work. Keep permanent broad roles and add a policy reminder: A reminder does not constrain authority. Assign a separate broad role to every developer: Different names do not reduce the effective privilege. Require only a corporate network connection: Network context alone does not correct excess permissions.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.