Acompany uses Microsoft cloud services. The company needs to protect against security breaches. You need to follow Microsoft's approach to security…

Microsoft's security approach is fundamentally based on the Zero Trust model. A core principle of this model is to "Assume Breach." This proactive security posture acknowledges that it is impossible to prevent every single attack. Instead of focusing solely on preventing unauthorized access at the perimeter, the "Assume Breach" strategy dictates that security systems should be designed with the expectation that an attacker is already inside the network. This mindset shifts the focus to minimizing the impact of a breach, segmenting access, verifying every request, and rapidly detecting and responding to threats.

A, B, C: These options suggest an absolutist and outdated security model where breaches can be completely prevented. This is unrealistic and directly contradicts the "Assume Breach" principle of Zero Trust.

D: This option incorrectly limits potential breaches to the network perimeter, ignoring numerous other attack vectors such as compromised identities, insider threats, or supply chain attacks.

1. Microsoft Learn. "Describe the Zero Trust methodology". MS-900: Microsoft 365 Fundamentals. In the "Guiding principles of Zero Trust" section

the third principle is "Assume breach." The documentation states

"By assuming an attacker can and will get past the network perimeter

you can take steps to contain the attack."

2. Microsoft Zero Trust Guidance Center. "Zero Trust principles". Microsoft Security. The "Assume Breach" section details this principle: "Minimize blast radius for breaches and prevent lateral movement by segmenting access by network

user

devices

and application awareness. ... Use analytics to get visibility

drive threat detection

and improve defenses."

3. Microsoft Learn. "What is Zero Trust?". Microsoft Docs. This document outlines the three guiding principles of Zero Trust

with "Assume breach" being the third. It emphasizes minimizing the "blast radius" and segmenting access because breaches are considered inevitable.