StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · SaaS PaaS IaaS containers and AI services

Practice question 326 of 498 · medium

A container receives privileged host access but only needs to serve HTTP requests. Which change most directly reduces compromise impact?

Choose the single best answer.

  1. A.Add image vulnerability scanning while retaining broad host mounts
  2. B.Remove unnecessary privilege and host access
  3. C.Require a signed image while keeping the same host privileges
  4. D.Restrict public ingress ports while leaving privileged host access intact
Show the answer and explanation

✓ Correct answer

  • Remove unnecessary privilege and host access

Remove the unnecessary privilege and host access to reduce post-compromise reach. Image signing and scanning are valuable artifact controls, while ingress restrictions narrow entry paths; none of the stated alternatives removes the excessive host authority available after the container is compromised.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.