StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · CAF Well Architected and secure adoption

Practice question 63 of 498 · hard

A legacy application needs a temporary exception to one baseline requirement. What is the best governance response?

Choose the single best answer.

  1. A.Give the application Owner on every subscription
  2. B.Remove the baseline assignment from the whole management group
  3. C.Approve a scoped, documented exemption with compensating controls, ownership, and an expiry or review date
  4. D.Move the application outside monitoring without recording why
Show the answer and explanation

✓ Correct answer

  • Approve a scoped, documented exemption with compensating controls, ownership, and an expiry or review date

Approve a scoped, documented exemption with compensating controls, ownership, and an expiry or review date: This preserves the baseline while governing the particular risk. Remove the baseline assignment from the whole management group: This weakens control for unrelated workloads. Move the application outside monitoring without recording why: That hides risk and creates an accountability gap. Give the application Owner on every subscription: More access does not address the configuration requirement.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.