StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Business resilience and ransomware

Practice question 24 of 498 · hard

An emergency security update must be accelerated across revenue-critical services. Which two practices should remain? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.One unrestricted patching identity shared by all contractors
  2. B.Permanent disabling of all release gates
  3. C.Monitoring that can halt expansion when failures occur
  4. D.Defined approval and a recoverable rollout with targeted health checks
  5. E.A commitment never to deploy urgent patches outside the normal cadence
Show the answer and explanation

✓ Correct answers

  • Monitoring that can halt expansion when failures occur
  • Defined approval and a recoverable rollout with targeted health checks

Defined approval and a recoverable rollout with targeted health checks: Urgency changes timing but does not remove the need for controlled change and recovery. Monitoring that can halt expansion when failures occur: A rapid release still needs evidence and a way to contain deployment impact. Permanent disabling of all release gates: Removing controls beyond the immediate need creates ongoing risk. One unrestricted patching identity shared by all contractors: Broad shared privileges increase the management-plane attack surface. A commitment never to deploy urgent patches outside the normal cadence: A rigid cadence can leave actively exploited critical workloads exposed.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.