StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · MCRA MCSB and Zero Trust · CAF Well Architected and secure adoption · Data classification encryption databases and storage

Practice question 493 of 498 · medium

An organization prepares a document assistant for all employees. Its retrieval system accurately respects permissions, but sensitive project folders are already shared with an overly broad employee group. What should happen before broad adoption?

Choose the single best answer.

  1. A.Release immediately because authorization checks correctly return allowed
  2. B.Review and narrow overshared permissions, then validate retrieval and data handling with the approved user population
  3. C.Replace authorization with a prompt telling users to avoid sensitive documents
  4. D.Block all identity authentication and use an anonymous retrieval service
  5. E.Treat higher model accuracy as a fix for overshared access
Show the answer and explanation

✓ Correct answer

  • Review and narrow overshared permissions, then validate retrieval and data handling with the approved user population

Review and narrow overshared permissions, then validate retrieval and data handling with the approved user population: Correctly applying excessive entitlements can still expose sensitive information through the assistant. Release immediately because authorization checks correctly return allowed: The checks faithfully reflect a scope that is too broad for the business requirement. Replace authorization with a prompt telling users to avoid sensitive documents: Instructions do not remediate the underlying sharing permissions. Block all identity authentication and use an anonymous retrieval service: This removes the access boundary rather than improving it. Treat higher model accuracy as a fix for overshared access: Model accuracy does not reduce existing entitlements.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.