Practice question 490 of 498 · hard
Two applications have similar vulnerability severity. One is an isolated training system. The other is a supplier-payment service whose deployment identity also controls the shared production identity infrastructure. The security budget covers one immediate intervention. Which prioritization best aligns enterprise controls with business resilience?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Prioritize the path to the payment and identity services using exposure, control influence, and business impact
Prioritize the path to the payment and identity services using exposure, control influence, and business impact: The connected authority can affect multiple high-value functions and should be considered with severity. Treat the two issues as identical because their severity scores match: Severity alone omits the different business impact and administrative influence. Prioritize whichever application uses the most expensive VM size: Compute cost does not establish criticality or attacker impact. Choose only the application with the oldest framework version without evaluating its reachable paths: Version age alone does not resolve the stated business-risk comparison. Wait for the next license renewal before evaluating either attack path: Procurement timing is not a risk-based treatment decision.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.