StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 416 of 498 · medium

A build pipeline consumes an unknown extension with access to deployment credentials. Which standard addresses the main risk?

Choose the single best answer.

  1. A.Disable component inventories once the pipeline succeeds
  2. B.Validate trusted pipeline components and restrict their privileges
  3. C.Share one production administrator credential across every task
  4. D.Approve all extensions solely by download count
Show the answer and explanation

✓ Correct answer

  • Validate trusted pipeline components and restrict their privileges

Trusted component review and limited privilege reduce supply-chain risk. Popularity alone is insufficient, shared administrator credentials amplify impact, and removing inventories prevents ongoing assessment.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.