Practice question 48 of 498 · hard
A compromised administrator is already inside a trusted network. Which two design elements directly reflect assume breach? Select two answers.
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Segmentation and constrained administrative access between critical systems
- Independent protection of recovery data and recovery authority
Independent protection of recovery data and recovery authority: The organization should retain a recovery path despite production compromise. Segmentation and constrained administrative access between critical systems: These controls restrict lateral movement and the impact of existing compromise. Automatic trust for all traffic originating inside the LAN: Internal origin does not establish safe or authorized access. One shared unrestricted administrator for every service: Shared broad authority increases the compromise blast radius. Removal of investigation telemetry to reduce complexity: Reduced visibility undermines detection and containment.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.