StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Hybrid multicloud posture and exposure

Practice question 265 of 498 · easy

Which description best defines an attack path in Security Exposure Management?

Choose the single best answer.

  1. A.A route connecting an entry point and weaknesses to critical assets
  2. B.A ranked list of vulnerabilities without asset-to-identity relationships
  3. C.A permitted network route between two subnets without weakness context
  4. D.A timeline limited to attacks already confirmed by incident responders
Show the answer and explanation

✓ Correct answer

  • A route connecting an entry point and weaknesses to critical assets

An attack path models a potential end-to-end route to critical assets through connected weaknesses and permissions. A flat vulnerability ranking lacks relationships. A network route alone lacks exploitation and privilege context. The modeled path does not require a confirmed incident.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.