StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 419 of 498 · medium

Which two standards directly reduce compromise of the development supply chain? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Least-privilege access and structured review for source repositories
  2. B.Unrestricted inbound network access to all agents
  3. C.Skipping dependency review for open-source components
  4. D.Permanent production administrator rights for all test jobs
  5. E.Trusted build tasks and protected build-agent credentials
Show the answer and explanation

✓ Correct answers

  • Least-privilege access and structured review for source repositories
  • Trusted build tasks and protected build-agent credentials

Repository governance and protected trusted builds reduce source and pipeline compromise. Broad rights, unrestricted inbound access, and exempting open-source dependencies enlarge the attack surface.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.