Recognizing that you do not have details of Microsoft's database, consider the types of vulnerabilities discussed in the lecture and readings, and then respond to the two questions below.

If you were the hacker, how might you exploit the vulnerabilities and compromise Microsoft$$s database? $$Discuss $2$ approaches you might take. For each approach, describe the Microsoft vulnerabilities that you would seek to exploit and why your hacking method therefore has a good chance of succeeding.

If you were the CISO of Microsoft, what could have you done to prevent this hacker's compromise of the database? In your response, discuss $3$ steps that you as CISO would have taken, and whether each step should still be implemented post$-$breach.