MS-100 Regulatory Frameworks & Compliance 5

Question 1

Under the EU-U.S. Data Privacy Framework, what must a US organization do before transferring personal data from the EU?

Accepted Answer

Self-certify with the US Department of Commerce under the framework

Answer

US organizations must self-certify their adherence to the EU-U.S. Data Privacy Framework principles with the US Department of Commerce to lawfully receive EU personal data.

Question 2

Which Microsoft Purview feature allows an organization to declare a document as an immutable record that cannot be edited or deleted before a specified retention period expires?

Accepted Answer

Retention labels configured as regulatory records

Answer

Retention labels configured as 'regulatory record' declare content immutable, preventing editing and deletion until the retention period ends, satisfying strict records management requirements.

Question 3

An organization's legal team needs to review only Teams messages containing the phrase 'off the record' for potential compliance violations. Which tool provides this targeted review capability?

Accepted Answer

Communication Compliance policy with custom keyword condition

Answer

Communication Compliance policies can target specific keywords like 'off the record' in Teams messages and route matching content to reviewers for investigation.

Question 4

A multinational company must comply with Brazil's LGPD data protection law. Which Microsoft Purview capability helps discover where Brazilian citizen data is stored across Microsoft 365?

Accepted Answer

Content Search with sensitive information types for Brazilian data

Answer

Content Search using Brazil-specific sensitive information types (like CPF numbers) identifies where Brazilian personal data resides across Exchange, SharePoint, and Teams.

Question 5

Which Microsoft 365 feature generates a Customer Lockbox request when Microsoft support engineers need to access customer content to resolve a service issue?

Accepted Answer

Customer Lockbox in the Microsoft 365 admin center

Answer

Customer Lockbox requires explicit customer approval before Microsoft support engineers can access Exchange Online, SharePoint Online, or Teams content during support operations.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Regulatory Frameworks & Compliance 5