Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
Microsoft · AB-900

Security principles

AB-900 · Lesson 4 of 16 · 23:35

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the AB-900 exam (Microsoft 365 Copilot and Agent Administration Fundamentals). In this lesson: Zero Trust and its three principles, authentication versus authorization, multifactor authentication and phishing-resistant methods (passkeys, Windows Hello, certificates), the retirement of Microsoft-provided text messages and voice calls, Microsoft Defender XDR incidents and automatic attack disruption, Secure Score and threat analytics. Includes three original practice questions.

Preview the topics
  • An admin is eligible for the Exchange Administrator role: they activate it for two hours, with a justification and an approval, and then it expires on its own. Which Zero Trust principle is this?
  • For its admins, the security team requires the built-in authentication strength Phishing-resistant MFA. Which method meets it?
  • A phishing email, a malicious file on a laptop and a risky sign-in hit the same user within one hour. Where does the analyst see them together, as a single attack?