Section: Describe the Concepts of Security, Compliance, and Identity
Explanation:
Box 1: Yes
Box 2: Yes
Box 3: No
The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.
Reference:
https://docs.microsoft.com/en-us/security/zero-trust/

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365- worldwide#how-compliance-manager-continuously-assesses-controls

Reference:
https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest