StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Identity authentication and access

Practice question 158 of 498 · medium

Development and production share a vault and broad secret-reader access. Which design change reduces blast radius?

Choose the single best answer.

  1. A.Rotate all secrets while keeping the same cross-environment authorization
  2. B.Separate vault security boundaries and narrow application access
  3. C.Use a private endpoint while every application retains access to every secret
  4. D.Keep one vault and retain broad secret-reader access after adding MFA for administrators
Show the answer and explanation

✓ Correct answer

  • Separate vault security boundaries and narrow application access

Separate boundaries and limited data access reduce cross-environment exposure. Admin MFA, private networking, and rotation protect other risks while leaving broad application secret access intact.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.