MS-500 Regulatory Frameworks & Compliance 2

Question 1

A healthcare organization must ensure Microsoft 365 data handling meets HIPAA requirements. Which Microsoft 365 compliance feature provides a Business Associate Agreement (BAA)?

Accepted Answer

Microsoft 365 HIPAA BAA available through the Service Trust Portal

Answer

Microsoft provides a HIPAA BAA for covered entities and business associates through the Service Trust Portal, covering eligible Microsoft 365 services.

Question 2

Under GDPR, which Microsoft 365 tool allows an organization to respond to a Data Subject Request (DSR) to export a user's personal data?

Accepted Answer

Microsoft Purview Content Search

Answer

Microsoft Purview Content Search enables administrators to find and export content associated with a specific user to fulfill GDPR Data Subject Requests.

Question 3

A company subject to SOC 2 Type II audits needs evidence that access reviews are performed regularly. Which Microsoft 365 feature best supports this?

Accepted Answer

Azure AD Access Reviews

Answer

Azure AD Access Reviews enable organizations to regularly review and certify user access to groups and applications, providing audit evidence for SOC 2 Type II.

Question 4

Which regulation specifically mandates that organizations notify affected individuals within 72 hours of discovering a personal data breach?

Accepted Answer

GDPR

Answer

GDPR Article 33 requires notification to the supervisory authority within 72 hours of becoming aware of a personal data breach.

Question 5

An organization needs to demonstrate compliance with NIST 800-53 controls within Microsoft 365. Which tool provides pre-built NIST assessments?

Accepted Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Compliance Manager includes pre-built assessment templates for NIST 800-53 that map controls to Microsoft 365 configuration actions.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Regulatory Frameworks & Compliance 2