StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 407 of 498 · medium

Which two inputs are essential when modeling a business-critical application's threats? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Only vulnerability scanner output without architecture context
  2. B.Only a network diagram that omits identities and application operations
  3. C.Only a compliance-control checklist without data flows
  4. D.Its components, dependencies, data flows, and trust boundaries
  5. E.Its sensitive assets and business-critical user flows
Show the answer and explanation

✓ Correct answers

  • Its components, dependencies, data flows, and trust boundaries
  • Its sensitive assets and business-critical user flows

Architecture boundaries plus sensitive assets and user flows form the system model. Scanner output and compliance checklists provide useful inputs but cannot replace it. A network-only diagram omits application and identity trust relationships needed for threat analysis.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.