AZ-301 Regulatory Frameworks & Compliance 3

Question 1

A US federal agency is deploying workloads to Azure and requires FedRAMP High authorization. Which Azure environment is specifically designed to meet this requirement?

Accepted Answer

Azure Government

Answer

Azure Government is a physically isolated cloud specifically designed and authorized for US federal government workloads at FedRAMP High impact level.

Question 2

Under the NIST Cybersecurity Framework, your organization needs to implement controls in the 'Identify' function. Which Azure service best helps you discover and classify sensitive data assets?

Accepted Answer

Microsoft Purview Data Map

Answer

Microsoft Purview Data Map scans and classifies data assets across your Azure environment, supporting the NIST CSF 'Identify' function's asset management requirements.

Question 3

A healthcare organization needs to implement the minimum necessary standard under HIPAA. Which Azure feature enforces least-privilege access to PHI stored in Azure Storage?

Accepted Answer

Azure RBAC with custom roles scoped to specific containers

Answer

HIPAA's minimum necessary standard is implemented through Azure RBAC custom roles that grant only the specific permissions required for each user's job function.

Question 4

Your organization must retain financial records for 7 years to comply with SEC regulations. Which Azure feature prevents deletion or modification of records during the retention period?

Accepted Answer

Azure Blob Storage immutable storage with time-based retention policies

Answer

Azure Blob immutable storage with WORM (Write Once, Read Many) time-based retention policies prevents records from being deleted or modified for SEC-required retention periods.

Question 5

Which compliance framework specifically addresses the security of payment card data and requires quarterly network scans by an Approved Scanning Vendor (ASV)?

Accepted Answer

PCI DSS

Answer

PCI DSS requires quarterly external vulnerability scans performed by an ASV as part of its ongoing security requirements for cardholder data environments.

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 Regulatory Frameworks & Compliance 3