StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Data classification encryption databases and storage

Practice question 463 of 498 · easy

A private assistant grounds answers using a shared search identity that can read every department's content. What must protect each user's data boundary?

Choose the single best answer.

  1. A.Retrieval-time document authorization using the authenticated user’s trusted permissions
  2. B.Only a system prompt instructing the model not to reveal confidential content
  3. C.A content-safety filter after all documents reach the model
  4. D.The shared search identity’s broad index permissions alone
Show the answer and explanation

✓ Correct answer

  • Retrieval-time document authorization using the authenticated user’s trusted permissions

Trusted document authorization constrains content before grounding. Content-safety filtering does not repair source permissions. Broad shared-search authority does not define each user’s rights. A system prompt is not an authorization boundary.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.