Explanation:

Box 1: Yes

Box 2: Yes

Box 3: No

The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.

Reference: https://docs.microsoft.com/en-us/security/zero-trust/

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization

Explanation:

Box 1: No

Box 2: Yes

Leaked Credentials indicates that the user’s valid credentials have been leaked.

Box 3: Yes

Multi-Factor Authentication can be required based on conditions, one of which is user risk.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-risk-based-sspr-mfa

Explanation:

Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution.

Reference: https://docs.microsoft.com/en-us/azure/sentinel/overview

Explanation:

Reference: https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

Explanation:

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365- worldwide#how-compliance-manager-continuously-assesses-controls