StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 400 of 498 · hard

The portfolio team must choose between a low-impact internal finding and an exploitable public API handling payment data. What is the strongest prioritization approach?

Choose the single best answer.

  1. A.Assign the same deadline to every issue regardless of consequences
  2. B.Use only the numeric vulnerability severity without assessing exposure or business impact
  3. C.Fix the largest number of findings regardless of severity and exposed data
  4. D.Assess exploitability, exposure, data sensitivity, and business impact, then assign an accountable deadline
Show the answer and explanation

✓ Correct answer

  • Assess exploitability, exposure, data sensitivity, and business impact, then assign an accountable deadline

Risk factors and ownership support meaningful prioritization. Counts alone, severity without local exposure or business context, and identical deadlines ignore differences in practical consequences.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.