StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 405 of 498 · medium

A payroll application lacks trustworthy activity records, and users can plausibly deny modifying payment details. Which mitigation most directly addresses the threat?

Choose the single best answer.

  1. A.A shorter session lifetime without recording payment changes
  2. B.Stronger at-rest encryption without activity attribution
  3. C.Protected audit records tied to trusted identities and relevant actions
  4. D.Only an input-schema validation rule
Show the answer and explanation

✓ Correct answer

  • Protected audit records tied to trusted identities and relevant actions

Attributable protected records address repudiation. At-rest encryption protects stored bytes, shorter sessions reduce exposure windows, and schema checks validate input format. None supplies trustworthy evidence of who changed payment details.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.