MS-100 Risk Assessment & Management 4

Question 1

A company must demonstrate compliance with GDPR. Which Microsoft 365 tool helps assess regulatory compliance posture and manage compliance activities with a built-in score?

Accepted Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Compliance Manager provides a compliance score, pre-built regulatory templates (including GDPR), and action tracking to help organizations manage compliance obligations.

Question 2

Which risk management concept does Microsoft Secure Score's 'planned' status for an improvement action represent?

Accepted Answer

The action is scheduled for implementation and excluded from the score gap

Answer

Marking an improvement action as 'Planned' indicates it's on the roadmap for implementation but not yet complete; it doesn't increase the current score but tracks intent.

Question 3

An administrator wants to track when privileged roles are activated in Azure AD PIM. Which audit capability should they use?

Accepted Answer

PIM audit history

Answer

Privileged Identity Management's audit history records all role activations, approvals, expirations, and assignment changes for privileged roles.

Question 4

An organization wants to reduce the attack surface by ensuring no user permanently holds the Global Administrator role. Which solution enforces just-in-time privileged access?

Accepted Answer

Azure AD Privileged Identity Management (PIM) with eligible assignments

Answer

PIM with eligible assignments requires users to explicitly activate their role for a limited time window, ensuring Global Administrator is not permanently held.

Question 5

A security team wants to receive alerts when a user is assigned the Global Administrator role outside of PIM. Which tool should they configure?

Accepted Answer

Microsoft 365 Defender alert policies or PIM alerts

Answer

PIM provides built-in alerts for direct role assignments that bypass the PIM workflow, and Microsoft 365 Defender alert policies can also trigger on suspicious admin role changes.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Risk Assessment & Management 4