Microsoft Certified: Cybersecurity Architect Expert Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Assume breach > Segmenting access • Reasoning: The "Assume breach" principle focuses on minimizing the blast radius of an attack and preventing lateral movement. This is primarily achieved by segmenting access across network layers, users, devices, and application boundaries. Verify explicitly > Data classification Reasoning: The "Verify explicitly" principle requires continuous authentication and authorization using all available telemetry points. This explicitly includes utilizing data classification to dynamically understand the sensitivity of the data being accessed and apply relevant conditional controls. Use least privilege access > Just-in-time (JIT) access • Reasoning: The "Least privilege" principle requires restricting user privileges to only what is necessary for their job functions. This is directly enforced using Just-in-time (JIT) access and Just-Enough-Access (JEA) models to grant elevated permissions temporarily and revoke them immediately after use.

• 2

  1. Assume breach Business continuity (Plan as if an attack will happen and ensure operations can continue.) 2. Verify explicitly Data classification (Know what data you’re protecting so verification can be enforced.) 3. Use least privilege access Just‑in‑time (JIT) (Give access only when needed.)

• 1

  1 - segment access - assume breach means contain attacker 2- JIT - slide 31 JIT / JEA under explicit and least privileged. The issue is they left out JEA as an option but per slide 31 it infers both. Misleading question that requires more clarity and accuracy for such a fundamental concept.