StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Identity authentication and access

Practice question 148 of 498 · hard

A report states all identity types are protected because an all-users policy is enabled. Which correction is needed?

Choose the single best answer.

  1. A.Assume nonhuman requests always inherit the sponsor’s policy
  2. B.Put agent users in a normal group to guarantee coverage
  3. C.Replace all tokens with API keys
  4. D.Validate separate supported scopes for workload and agent identities and Agent Users
Show the answer and explanation

✓ Correct answer

  • Validate separate supported scopes for workload and agent identities and Agent Users

Scopes differ, particularly agent user exclusions from ordinary Users policies. Sponsors do not represent all agent requests, current group targeting is unsupported, and keys bypass Entra evaluation.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.