StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Hybrid multicloud posture and exposure

Practice question 270 of 498 · hard

Which two requirements make a security exposure improvement process measurable and accountable? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Prioritize solely by the largest number of low-severity findings
  2. B.Define critical assets and responsible remediation owners
  3. C.Track relevant initiative metrics and verify residual exposure
  4. D.Keep exceptions permanent without reassessment
  5. E.Treat missing telemetry as evidence of successful mitigation
Show the answer and explanation

✓ Correct answers

  • Define critical assets and responsible remediation owners
  • Track relevant initiative metrics and verify residual exposure

Criticality and ownership align remediation with business risk, while metrics and verification show progress. Raw finding count ignores impact. Missing telemetry creates uncertainty. Permanent unreviewed exceptions allow exposure to persist.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.