SC-100 Compliance, Governance & Data Security 2

Question 1

A company must demonstrate GDPR compliance for EU customer data stored in Azure. Which Microsoft service provides a centralized view of regulatory compliance posture across Azure resources?

Accepted Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Compliance Manager provides a centralized dashboard for assessing and tracking regulatory compliance posture, including GDPR.

Question 2

An organization needs to prevent accidental sharing of credit card numbers in Microsoft Teams messages. Which Microsoft Purview feature should be implemented?

Accepted Answer

Data Loss Prevention (DLP) policies

Answer

DLP policies in Microsoft Purview detect and block sharing of sensitive information like credit card numbers across Microsoft 365 services including Teams.

Question 3

A cybersecurity architect needs to classify Azure resources based on their data sensitivity to enforce access controls. Which Azure feature enables resource classification through tagging for governance?

Accepted Answer

Microsoft Purview data catalog

Answer

Microsoft Purview data catalog provides automated data discovery and classification across Azure and on-premises data sources.

Question 4

Under the shared responsibility model in Azure, which security control remains solely the customer's responsibility regardless of the service model (IaaS, PaaS, or SaaS)?

Accepted Answer

Data classification and accountability

Answer

Data classification and accountability always remains the customer's responsibility across all cloud service models.

Question 5

An organization must retain audit logs for 7 years to meet financial regulatory requirements. Which Azure service should be configured to archive logs cost-effectively for this duration?

Accepted Answer

Azure Storage with lifecycle management policies

Answer

Azure Storage with lifecycle management policies can automatically tier data to cool/archive tiers, making long-term log retention cost-effective.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Compliance, Governance & Data Security 2