SC-100 Practice Question 3882

Exam: SC-100
Domain: Design solutions that align with security best practices and priorities
Difficulty: medium
When designing ransomware mitigation, why does Microsoft recommend configuring Customer Lockbox in Microsoft 365 and Azure?

Answer Options

A
Ensures Microsoft engineers cannot access customer data without explicit approval
B
Locks the physical server chassis in the Azure data center
C
Prevents employees from logging into work accounts on weekends
D
Stores user passwords in a physical vault on company premises

Correct Answer

A: Ensures Microsoft engineers cannot access customer data without explicit approval

Explanation

Customer Lockbox ensures that Microsoft cloud engineers cannot access customer data during support or service operations without explicit, time-limited approval from the customer administrator.