MS-500 Regulatory Frameworks & Compliance 4

Question 1

Which Microsoft Purview feature allows an organization to satisfy GDPR Article 17 (right to erasure) by removing a specific user's data from Microsoft 365 workloads?

Accepted Answer

Data Subject Request (DSR) case in Purview eDiscovery

Answer

A DSR case in Microsoft Purview eDiscovery enables administrators to search, review, and delete specific user data across Microsoft 365 to fulfill the GDPR right to erasure.

Question 2

A healthcare organization wants Microsoft to notify them before any Microsoft support engineer accesses their Microsoft 365 content. Which feature enables this?

Accepted Answer

Customer Lockbox

Answer

Customer Lockbox ensures that Microsoft support engineers must request and receive customer approval before accessing customer content in Microsoft 365.

Question 3

Under ITAR (International Traffic in Arms Regulations), which Microsoft 365 environment is designed to restrict data to U.S. persons?

Accepted Answer

Microsoft 365 Government GCC High

Answer

Microsoft 365 GCC High restricts data handling to U.S. persons and is designed to support organizations subject to ITAR and other export control regulations.

Question 4

Which Microsoft Purview capability helps demonstrate compliance with recordkeeping requirements under FINRA Rule 4511 for broker-dealers?

Accepted Answer

Communication compliance with Teams message archiving and Preservation Lock

Answer

Communication compliance archiving combined with Preservation Lock ensures broker-dealer communications are retained immutably to satisfy FINRA Rule 4511 recordkeeping requirements.

Question 5

A multinational company must comply with data residency requirements in Germany. Which Microsoft 365 feature ensures German customer data stays within Germany?

Accepted Answer

Microsoft 365 Multi-Geo with Germany data residency

Answer

Microsoft 365 Multi-Geo allows organizations to specify data residency locations so German users' data is stored and processed within Germany's geographic boundaries.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Regulatory Frameworks & Compliance 4