AZ-301 Regulatory Frameworks & Compliance 2

Question 1

A healthcare company must ensure patient data stored in Azure meets HIPAA requirements. Which Azure service provides built-in HIPAA compliance documentation and audit reports?

Accepted Answer

Microsoft Service Trust Portal

Answer

The Microsoft Service Trust Portal provides HIPAA audit reports, compliance guides, and third-party assessments for regulated industries.

Question 2

Under GDPR, a user requests deletion of all their personal data stored in your Azure SQL Database. Which approach best supports the 'right to be forgotten' requirement?

Accepted Answer

Delete the specific records and purge from backups within the required timeframe

Answer

GDPR's right to erasure requires actual deletion of personal data records, including purging from backups within a compliant timeframe.

Question 3

Your organization is subject to PCI DSS and stores cardholder data in Azure. Which Azure feature helps you restrict access to cardholder data environments based on network segmentation?

Accepted Answer

Azure Virtual Network with Network Security Groups

Answer

PCI DSS requires network segmentation of the cardholder data environment, which is achieved using Azure VNets with NSGs to control traffic flow.

Question 4

A financial services firm needs SOC 2 Type II compliance for their Azure-hosted application. Which statement accurately describes Microsoft's responsibility in this shared model?

Accepted Answer

Microsoft provides SOC 2 reports for Azure infrastructure that customers can inherit

Answer

Microsoft maintains SOC 2 Type II certification for Azure infrastructure, and customers can inherit these controls for their own compliance attestations.

Question 5

Which Azure feature allows you to create guardrails that prevent resource deployments in non-compliant Azure regions to meet data residency requirements?

Accepted Answer

Azure Policy with allowed locations definition

Answer

The built-in 'Allowed locations' Azure Policy definition prevents resources from being deployed outside specified geographic regions.

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 Regulatory Frameworks & Compliance 2