AZ-301 Regulatory Frameworks & Compliance 2 — Questions and Answers
Question 1: A healthcare company must ensure patient data stored in Azure meets HIPAA requirements. Which Azure service provides built-in HIPAA compliance documentation and audit reports?
- Azure Security Center
- Azure Policy
- Microsoft Service Trust Portal (Correct answer)
- Azure Compliance Manager
Correct answer: Microsoft Service Trust Portal
The Microsoft Service Trust Portal provides HIPAA audit reports, compliance guides, and third-party assessments for regulated industries.
Question 2: Under GDPR, a user requests deletion of all their personal data stored in your Azure SQL Database. Which approach best supports the 'right to be forgotten' requirement?
- Enable Transparent Data Encryption and rotate keys
- Implement row-level security to hide the data
- Delete the specific records and purge from backups within the required timeframe (Correct answer)
- Archive the data to Azure Cold storage
Correct answer: Delete the specific records and purge from backups within the required timeframe
GDPR's right to erasure requires actual deletion of personal data records, including purging from backups within a compliant timeframe.
Question 3: Your organization is subject to PCI DSS and stores cardholder data in Azure. Which Azure feature helps you restrict access to cardholder data environments based on network segmentation?
- Azure Active Directory Conditional Access
- Azure Virtual Network with Network Security Groups (Correct answer)
- Azure Information Protection
- Azure Sentinel
Correct answer: Azure Virtual Network with Network Security Groups
PCI DSS requires network segmentation of the cardholder data environment, which is achieved using Azure VNets with NSGs to control traffic flow.
Question 4: A financial services firm needs SOC 2 Type II compliance for their Azure-hosted application. Which statement accurately describes Microsoft's responsibility in this shared model?
- Microsoft is responsible for the application code compliance
- Microsoft provides SOC 2 reports for Azure infrastructure that customers can inherit (Correct answer)
- Customers are fully responsible for obtaining their own SOC 2 certification
- Microsoft automatically certifies all customer applications running on Azure
Correct answer: Microsoft provides SOC 2 reports for Azure infrastructure that customers can inherit
Microsoft maintains SOC 2 Type II certification for Azure infrastructure, and customers can inherit these controls for their own compliance attestations.
Question 5: Which Azure feature allows you to create guardrails that prevent resource deployments in non-compliant Azure regions to meet data residency requirements?
- Azure Blueprints location locks
- Azure Policy with allowed locations definition (Correct answer)
- Management Group RBAC restrictions
- Azure Resource Manager templates
Correct answer: Azure Policy with allowed locations definition
The built-in 'Allowed locations' Azure Policy definition prevents resources from being deployed outside specified geographic regions.
Question 6: A company must comply with ISO 27001 and wants to map Azure security controls to ISO 27001 requirements. Which tool provides this mapping?
- Azure Advisor
- Microsoft Compliance Manager (Correct answer)
- Azure Monitor
- Azure Resource Graph
Correct answer: Microsoft Compliance Manager
Microsoft Compliance Manager provides control mappings between Azure security features and regulatory frameworks including ISO 27001.
Question 7: Your organization processes EU citizen data and must comply with GDPR's data transfer restrictions. Which mechanism allows lawful transfer of personal data from the EU to the US when using Azure?
- Azure Geo-replication agreement
- Standard Contractual Clauses (SCCs) included in Microsoft's DPA (Correct answer)
- EU-US Blanket Transfer Policy
- Azure Data Factory cross-region pipelines
Correct answer: Standard Contractual Clauses (SCCs) included in Microsoft's DPA
Microsoft's Data Processing Agreement includes Standard Contractual Clauses approved by EU authorities, enabling lawful cross-border data transfers.
AZ-301 Regulatory Frameworks & Compliance 2
A healthcare company must ensure patient data stored in Azure meets HIPAA requirements.
Which Azure service provides built-in HIPAA compliance documentation and audit reports?