StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 418 of 498 · hard

A developer environment connects directly to production using broad data permissions. Which design change best aligns with secure development standards?

Choose the single best answer.

  1. A.Replace production network restrictions with peer code review alone
  2. B.Allow direct production access whenever the developer passed a coding course
  3. C.Encrypt the copied production dataset but give every developer unrestricted decryption access
  4. D.Separate environments and provide only justified controlled access and protected test data
Show the answer and explanation

✓ Correct answer

  • Separate environments and provide only justified controlled access and protected test data

Environment separation, justified access, and protected test data reduce lateral movement and exposure. Training does not authorize every production action, encryption does not limit every permitted reader, and code review does not establish a network or data-access boundary.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.