StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Identity authentication and access

Practice question 138 of 498 · hard

A partner onboarding design uses Verified ID and a three-month project access package. Which two controls are still required? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Validate the credential’s trusted issuer and presentation evidence
  2. B.Apply approved package assignments and expiry/review policy
  3. C.Grant permanent tenant-wide roles to anyone holding a credential
  4. D.Assume the credential prevents all data exfiltration
  5. E.Skip removal because the external account remains valid
Show the answer and explanation

✓ Correct answers

  • Validate the credential’s trusted issuer and presentation evidence
  • Apply approved package assignments and expiry/review policy

Credential validation establishes evidence; access-package policy governs rights/lifecycle. A credential does not justify broad permanent roles or prevent all misuse, and a valid external account does not imply ongoing project authorization.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.