StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 441 of 498 · medium

A valid business request triggers one managed rule. What is the best next action?

Choose the single best answer.

  1. A.Grant every client an unconditional broad allow rule
  2. B.Remove WAF logging to hide the event
  3. C.Investigate the match and apply the narrowest justified tuning or exclusion, then retest
  4. D.Disable every managed rule permanently
Show the answer and explanation

✓ Correct answer

  • Investigate the match and apply the narrowest justified tuning or exclusion, then retest

Targeted evidence-based tuning preserves useful inspection while addressing a false positive. Global disablement and broad allow rules unnecessarily weaken protection, and suppressing logs removes diagnostic evidence.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.