StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Data classification encryption databases and storage

Practice question 468 of 498 · hard

A document-grounded agent can invoke business tools. Which three design actions address distinct security risks? Select three.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Give the agent subscription Owner so it can recover from all errors
  2. B.Limit tool identity permissions and validate sensitive operations independently of model output
  3. C.Detect adversarial user or document instructions and enforce the application's chosen response
  4. D.Assume a prompt-injection detector certifies content accuracy and authorization
  5. E.Constrain retrieval using the authenticated user's intended document rights
Show the answer and explanation

✓ Correct answers

  • Limit tool identity permissions and validate sensitive operations independently of model output
  • Detect adversarial user or document instructions and enforce the application's chosen response
  • Constrain retrieval using the authenticated user's intended document rights

Retrieval authorization, enforced attack handling, and least-privilege tool execution address different failures. Subscription Owner expands potential damage, and injection detection does not certify truth or access rights.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.