StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Business resilience and ransomware · Privileged access and governance · Data classification encryption databases and storage

Practice question 495 of 498 · hard

A ransomware review finds that the vault administrator also holds permanent Resource Guard authority and the database recovery procedure has never been tested with the original production identity disabled. Which TWO corrections directly strengthen recovery under production-admin compromise? Select TWO.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Remove the vault administrator standing rights that satisfy Resource Guard checks and require independent temporary authorization
  2. B.Test restoration with approved recovery identities, usable keys, and required dependencies under the compromise scenario
  3. C.Increase production administrator rights so the same identity can handle every recovery task
  4. D.Retain MUA but give its independent guard permissions back to the vault administrator permanently
  5. E.Declare every source-database operation protected automatically by Resource Guard
  6. F.Treat a successful replication job as proof of clean historical recovery
Show the answer and explanation

✓ Correct answers

  • Remove the vault administrator standing rights that satisfy Resource Guard checks and require independent temporary authorization
  • Test restoration with approved recovery identities, usable keys, and required dependencies under the compromise scenario

Remove the vault administrator standing rights that satisfy Resource Guard checks and require independent temporary authorization: This restores separation for the configured critical vault operations. Test restoration with approved recovery identities, usable keys, and required dependencies under the compromise scenario: This validates the practical recovery path when production authority is unsafe or unavailable. Increase production administrator rights so the same identity can handle every recovery task: That reinforces the concentrated compromised authority. Treat a successful replication job as proof of clean historical recovery: Replication may copy destructive changes and does not exercise restoration. Retain MUA but give its independent guard permissions back to the vault administrator permanently: Standing guard authority defeats the stated independent boundary. Declare every source-database operation protected automatically by Resource Guard: MUA has a defined vaulted-operation scope rather than every source operation.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.