StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Data classification encryption databases and storage

Practice question 486 of 498 · hard

A service accepts untrusted files and uses data threat alerts. Which three operational design measures are appropriate? Select three.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Remove preventive identity and network controls once detection is enabled
  2. B.Publish files whenever no alert appears immediately
  3. C.Monitor coverage gaps such as caps, failures, or unsupported content
  4. D.Keep clean, malicious, and nonfinal scan states distinct in release decisions
  5. E.Route actionable alerts to owners with triage and containment procedures
Show the answer and explanation

✓ Correct answers

  • Monitor coverage gaps such as caps, failures, or unsupported content
  • Keep clean, malicious, and nonfinal scan states distinct in release decisions
  • Route actionable alerts to owners with triage and containment procedures

Explicit result states, coverage monitoring, and accountable response make detections useful. Immediate absence of an alert does not prove clean content, and threat detection complements rather than replaces prevention.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.