Question 480
An enterprise security architecture project has TWO distinct requirements in the same workstream: (1) A collaboration tenant has several risky sharing settings but leadership only tracks purchased security licenses. (2) A Secure Score rises after a control receives an exception status although the underlying user access configuration is unchanged. Which paired set of recommendations satisfies BOTH requirements without substituting a control intended for another risk?
Explanation
Correct Answer
For requirement (1), Security product licensing does not establish that recommended controls are enabled. For requirement (2), Assessment scores may not prove an unsafe configuration has been repaired. Both controls are required to meet the paired risks without substituting for each other.
Incorrect Answers
Requirement (1) is not met: Security product licensing does not establish that recommended controls are enabled. The substituted action is instead for this different case: An architect compares two Microsoft 365 tenants' security scores without considering their different licensed feature sets. Requirement (2) is not met: Assessment scores may not prove an unsafe configuration has been repaired. The substituted action is instead for this different case: The security architect wants to prioritize tenant security improvements but cannot quantify the impact of disrupting daily collaboration. The proposed bundle therefore cannot satisfy BOTH stated requirements.
Requirement (1) is not met: Security product licensing does not establish that recommended controls are enabled. The substituted action is instead for this different case: An architect compares two Microsoft 365 tenants' security scores without considering their different licensed feature sets. The proposed bundle therefore cannot satisfy BOTH stated requirements.
Requirement (2) is not met: Assessment scores may not prove an unsafe configuration has been repaired. The substituted action is instead for this different case: The security architect wants to prioritize tenant security improvements but cannot quantify the impact of disrupting daily collaboration. The proposed bundle therefore cannot satisfy BOTH stated requirements.






Microsoft Cybersecurity Architect (SC-100) Practice Tests