Practice question 32 of 498 · medium
An employee with valid access repeatedly exports sensitive documents to an unapproved destination. What is the strongest architectural response?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Combine least-privilege review, data-loss controls, and a governed investigation
Combine least-privilege review, data-loss controls, and a governed investigation: Legitimate credentials do not make every data-handling action permitted or safe. Allow the activity automatically because authentication succeeded: Authentication establishes identity, not approval for every data action. Investigate only the external firewall configuration: Perimeter configuration alone misses activity using permitted internal access. Treat backup availability as prevention of disclosure: Recoverability does not prevent exfiltration or its confidentiality consequences.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.