StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Privileged access and governance

Practice question 201 of 498 · medium

A privileged workstation allows general email, arbitrary browsing, and user-installed software. Which change best reduces its attack surface?

Choose the single best answer.

  1. A.Allow permanent local admin for convenience
  2. B.Install more general-purpose browsers
  3. C.Restrict it to approved administrative applications and management sites
  4. D.Stop collecting endpoint alerts
Show the answer and explanation

✓ Correct answer

  • Restrict it to approved administrative applications and management sites

Approved applications and sites reduce exposure. More browsing and local administration expand it, while stopping alerts removes detection.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.