MS-100 Regulatory Frameworks & Compliance 2

Question 1

Your organization must comply with HIPAA. Which Microsoft 365 feature allows you to automatically detect and protect documents containing Protected Health Information (PHI)?

Accepted Answer

Data Loss Prevention policies with HIPAA template

Answer

DLP policies using the HIPAA template automatically detect PHI patterns and apply protection actions such as blocking sharing or alerting administrators.

Question 2

Under GDPR, a data subject requests erasure of their personal data. Which Microsoft 365 Compliance Center tool is used to locate and delete that data across Microsoft 365 services?

Accepted Answer

Data Subject Request (DSR) tool in Privacy

Answer

The DSR tool in the Microsoft Purview Privacy portal guides administrators through locating, reviewing, and deleting personal data in response to GDPR erasure requests.

Question 3

An organization subject to FedRAMP wants to store Microsoft 365 data exclusively within US datacenters. Which offering satisfies this requirement?

Accepted Answer

Microsoft 365 Government (GCC High)

Answer

Microsoft 365 GCC High is designed for US federal agencies and contractors requiring FedRAMP High authorization with data stored only in US datacenters.

Question 4

Which Microsoft Purview feature provides a risk score and recommended actions to help an organization measure its compliance posture against regulatory standards?

Accepted Answer

Compliance Manager

Answer

Compliance Manager provides a compliance score based on completed improvement actions mapped to regulatory frameworks like ISO 27001, GDPR, and NIST.

Question 5

A company using Microsoft 365 must meet CCPA requirements. Which action is required when a California consumer submits a 'Do Not Sell My Personal Information' request?

Accepted Answer

Process the request via the DSR workflow and restrict data sharing

Answer

CCPA opt-out requests are handled through the Data Subject Request workflow, which allows organizations to restrict or stop the sale/sharing of personal information.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Regulatory Frameworks & Compliance 2