StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Hybrid multicloud posture and exposure

Practice question 269 of 498 · medium

An attacker route involves a public service and an unnecessarily privileged identity. Which two changes can interrupt the path? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Reduce the identity’s excessive permissions
  2. B.Rotate only the public service TLS certificate while keeping its exposure and identity permissions
  3. C.Patch a workstation outside the modeled route
  4. D.Increase logging on the public service without changing reachability or privilege
  5. E.Restrict unnecessary public reachability
Show the answer and explanation

✓ Correct answers

  • Reduce the identity’s excessive permissions
  • Restrict unnecessary public reachability

Restricting the unnecessary entry point and reducing excessive identity privilege directly changes the modeled route. Certificate rotation unrelated to the exploited weakness, patching an unrelated asset, and additional logging do not remove the stated exposure or permission path. Reassess feasibility after remediation.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.