StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 409 of 498 · easy

A team proposes adding security only after feature development is complete. Which lifecycle strategy should the architect recommend?

Choose the single best answer.

  1. A.Embed security requirements, design analysis, testing, and operational feedback throughout the lifecycle
  2. B.Delegate every security requirement to the WAF
  3. C.Stop reviewing dependencies after the initial release
  4. D.Use only a final penetration test for all security assurance
Show the answer and explanation

✓ Correct answer

  • Embed security requirements, design analysis, testing, and operational feedback throughout the lifecycle

Continuous lifecycle security addresses design, code, supply chain, and operations. A final test cannot replace earlier controls, WAF cannot implement every requirement, and dependencies can become vulnerable after release.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.