StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Privileged access and governance

Practice question 178 of 498 · hard

A ransomware recovery plan relies only on the most recent DC backup and never checked its integrity. What is the key concern?

Choose the single best answer.

  1. A.Encrypting the backup guarantees that its restored directory state is uncompromised
  2. B.Restoring any read-only DC backup replaces every writable domain
  3. C.The newest backup is always safest
  4. D.The backup may contain the compromised state and must be assessed as trusted recovery material
Show the answer and explanation

✓ Correct answer

  • The backup may contain the compromised state and must be assessed as trusted recovery material

The backup may preserve an already compromised directory state, so trusted recovery material must be assessed. The newest backup is not inherently safe. Encryption protects backup confidentiality but does not prove the restored state is uncompromised, and a read-only DC backup cannot restore writable domain controllers across every domain.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.