MS-500 Regulatory Frameworks & Compliance 5

Question 1

Which Microsoft 365 feature helps satisfy GDPR's requirement for Privacy by Design by classifying and protecting sensitive data at creation time?

Accepted Answer

Sensitivity labels applied automatically via trainable classifiers

Answer

Auto-applying sensitivity labels at content creation via trainable classifiers embeds data protection from the start, supporting the GDPR Privacy by Design principle.

Question 2

A company must demonstrate that sensitive emails containing PII are encrypted in transit and at rest to satisfy GDPR Article 32. Which feature addresses this?

Accepted Answer

Microsoft 365 Message Encryption (OME) with transport rules

Answer

Office 365 Message Encryption applied via mail flow rules encrypts sensitive emails automatically, addressing GDPR Article 32's requirement for appropriate technical security measures.

Question 3

Which Microsoft 365 compliance feature allows legal holds to be placed on a former employee's mailbox to satisfy litigation preservation requirements under FRCP Rule 37(e)?

Accepted Answer

Microsoft Purview eDiscovery Litigation Hold

Answer

eDiscovery Litigation Hold preserves all mailbox content including deleted items, ensuring electronically stored information is available for litigation per FRCP Rule 37(e).

Question 4

An organization subject to GLBA (Gramm-Leach-Bliley Act) must protect nonpublic personal financial information. Which Microsoft Purview feature is most directly applicable?

Accepted Answer

Data Loss Prevention policies targeting financial information sensitive information types

Answer

DLP policies using Microsoft's built-in financial sensitive information types detect and protect nonpublic personal financial information to satisfy GLBA Safeguards Rule requirements.

Question 5

Which Microsoft 365 audit log event type is most important for demonstrating compliance with HIPAA's Audit Controls standard (§164.312(b))?

Accepted Answer

Unified audit log entries including access to mailboxes containing PHI

Answer

HIPAA §164.312(b) requires audit controls to record and examine activity in information systems containing PHI; unified audit logs capturing mailbox and SharePoint access achieve this.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Regulatory Frameworks & Compliance 5