AZ-204 Regulatory Frameworks & Compliance 2

Question 1

Your Azure app stores EU citizen health data. Which Azure service helps you demonstrate GDPR Article 30 record-of-processing compliance?

Accepted Answer

Microsoft Purview Data Map

Answer

Microsoft Purview Data Map catalogs and classifies data assets, supporting GDPR Article 30 records-of-processing requirements.

Question 2

An AZ-204 developer must ensure Azure Blob Storage objects containing PII are automatically deleted after 7 years per company retention policy. Which feature should be used?

Accepted Answer

Blob lifecycle management rules

Answer

Blob lifecycle management rules can automatically delete blobs based on last-modified date to enforce retention policies.

Question 3

Your organization must comply with FedRAMP Moderate. Which Azure environment is pre-authorized for FedRAMP Moderate workloads?

Accepted Answer

Azure Government cloud

Answer

Azure Government is specifically designed and pre-authorized for U.S. government workloads requiring FedRAMP compliance.

Question 4

A developer needs to log all access to Azure Key Vault secrets for a PCI DSS audit. Which diagnostic setting destination provides the longest default retention at lowest cost?

Accepted Answer

Azure Storage Account archive tier

Answer

Storage Account archive tier offers the lowest cost for long-term audit log retention required by PCI DSS.

Question 5

Under HIPAA, your app must encrypt PHI in transit between a web front-end and Azure SQL Database. Which Azure feature enforces TLS for all SQL connections?

Accepted Answer

SSL/TLS enforce connection policy

Answer

The SQL Database enforce SSL/TLS connection policy rejects unencrypted connections, ensuring PHI is encrypted in transit.

AZ-204 - Microsoft Azure Developer Associate Practice Test

AZ-204 - Microsoft Azure Developer Associate Practice Test

AZ-204 Regulatory Frameworks & Compliance 2