If you were the hacker, how might you exploit the vulnerabilities and compromise Microsoft$$s database? $$Discuss $2$ approaches you might take. For each approach, describe the Microsoft vulnerabilities that you would seek to exploit and why your hacking method therefore has a good chance of succeeding.

If you were the CISO of Microsoft, what could have you done to prevent this hacker's compromise of the database? In your response, discuss $3$ steps that you as CISO would have taken, and whether each step should still be implemented post$-$breach.