StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Business resilience and ransomware

Practice question 16 of 498 · hard

An organization has tested immutable backups but discovers that customer files were exfiltrated before encryption. What is the best conclusion?

Choose the single best answer.

  1. A.Immutability was necessarily misconfigured because exfiltration occurred
  2. B.A successful restore removes all confidentiality consequences
  3. C.Data protection is unnecessary after recovery succeeds
  4. D.Recovery protection is valuable, but disclosure and access risks require additional controls
Show the answer and explanation

✓ Correct answer

  • Recovery protection is valuable, but disclosure and access risks require additional controls

Recovery protection is valuable, but disclosure and access risks require additional controls: Backups restore data; they do not undo prior theft or prevent unauthorized disclosure. Immutability was necessarily misconfigured because exfiltration occurred: Vault immutability addresses recovery-point destruction, not every production data access. A successful restore removes all confidentiality consequences: Restoration cannot revoke knowledge of data already stolen. Data protection is unnecessary after recovery succeeds: The incident demonstrates why disclosure prevention and detection are still needed.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.