StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Privileged access and governance

Practice question 190 of 498 · hard

CIEM recommends removing permissions unused in recent telemetry, but the workload has a quarterly recovery task. What should happen before removal?

Choose the single best answer.

  1. A.Add tenant-wide administration rights to avoid outages
  2. B.Remove all rights immediately without validation
  3. C.Ignore every recommendation forever
  4. D.Validate the recovery dependency with the owner and test a narrower permission set
Show the answer and explanation

✓ Correct answer

  • Validate the recovery dependency with the owner and test a narrower permission set

Usage-based recommendations need dependency validation and safe narrowing. Blind removal can break recovery, ignoring all findings preserves excess, and broader rights worsen the problem.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.