StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Data classification encryption databases and storage

Practice question 456 of 498 · hard

A high-impact data risk cannot be fully remediated before a deadline. Which two activities support an accountable interim decision? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Assume regulatory obligations disappear after management signs a note
  2. B.Record the affected data, residual risk, owner, compensating measures, and review date
  3. C.Replace risk assessment with a total recommendation-point count
  4. D.Validate the interim control against the actual exposure path
  5. E.Mark the issue permanently solved without evidence
Show the answer and explanation

✓ Correct answers

  • Record the affected data, residual risk, owner, compensating measures, and review date
  • Validate the interim control against the actual exposure path

An explicit residual-risk record and tested compensating controls support accountable acceptance. Unsupported closure and point totals conceal the risk, and a management note cannot erase legal obligations.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.