StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · MCRA MCSB and Zero Trust

Practice question 30 of 498 · hard

An organization adopts MCSB v2 guidance for an AI application. Which two actions are necessary for a defensible architecture? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Treat policy assignment as proof that agent tools cannot be abused
  2. B.Omit operational and human controls because the benchmark has cloud guidance
  3. C.Assume every recommendation has a generally available automated policy
  4. D.Check current preview status and actual service support for the chosen controls
  5. E.Test required security outcomes and keep implementation evidence with responsible owners
Show the answer and explanation

✓ Correct answers

  • Check current preview status and actual service support for the chosen controls
  • Test required security outcomes and keep implementation evidence with responsible owners

Check current preview status and actual service support for the chosen controls: Benchmark recommendations and platform implementation availability are distinct. Test required security outcomes and keep implementation evidence with responsible owners: Control alignment must be demonstrated in the deployed workload. Assume every recommendation has a generally available automated policy: Some controls require application logic, processes, or preview features. Treat policy assignment as proof that agent tools cannot be abused: Agent authorization and runtime behavior require specific enforcement and validation. Omit operational and human controls because the benchmark has cloud guidance: Cloud guidance does not remove organizational responsibilities.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.