AZ-301 Regulatory Frameworks & Compliance 4

Question 1

A defense contractor must comply with CMMC (Cybersecurity Maturity Model Certification) Level 2. Which set of controls does this level primarily align to?

Accepted Answer

NIST SP 800-171 practices

Answer

CMMC Level 2 aligns to the 110 practices in NIST SP 800-171, which protects Controlled Unclassified Information (CUI) in nonfederal systems.

Question 2

Your organization uses Azure Key Vault to manage encryption keys for FIPS 140-2 compliance. Which Key Vault tier provides HSM-backed keys that meet FIPS 140-2 Level 3 validation?

Accepted Answer

Azure Key Vault Premium tier with HSM-protected keys

Answer

Azure Key Vault Premium tier uses FIPS 140-2 Level 3 validated HSMs to protect keys, meeting requirements for regulated industries.

Question 3

An organization subject to Sarbanes-Oxley (SOX) needs to implement controls over financial reporting systems in Azure. Which SOX section specifically addresses IT general controls?

Accepted Answer

Section 404 - Management Assessment of Internal Controls

Answer

SOX Section 404 requires management to assess and report on internal controls over financial reporting, including IT general controls in cloud environments.

Question 4

Under the EU AI Act, which risk category would an AI system deployed on Azure that makes autonomous credit decisions for EU consumers fall into?

Accepted Answer

High risk

Answer

AI systems making credit decisions are explicitly classified as high-risk under the EU AI Act Annex III, requiring conformity assessments and enhanced transparency.

Question 5

A company must comply with California Consumer Privacy Act (CCPA). Which Azure feature helps implement the consumer right to opt-out of the sale of personal information?

Accepted Answer

Microsoft Purview subject rights request management

Answer

Microsoft Purview's subject rights request management helps organizations respond to consumer privacy requests including CCPA opt-out requests at scale.

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 Regulatory Frameworks & Compliance 4