SC-200 Compliance & Regulatory Frameworks 3

Question 1

A security analyst is using Microsoft Purview Compliance Manager. What does the 'improvement actions' section provide?

Accepted Answer

Step-by-step guidance for implementing controls to improve compliance scores

Answer

Improvement actions in Compliance Manager provide detailed, step-by-step guidance for implementing specific controls that will increase the organization's compliance score.

Question 2

Under the CCPA (California Consumer Privacy Act), which right allows California residents to request deletion of their personal information held by a business?

Accepted Answer

Right to Delete

Answer

The Right to Delete under CCPA allows California residents to request that businesses delete personal information collected about them, subject to certain exceptions.

Question 3

An analyst needs to search for sensitive data across Microsoft 365 services to meet GDPR data mapping requirements. Which tool should be used?

Accepted Answer

Microsoft Purview Content Search

Answer

Microsoft Purview Content Search allows analysts to search across Exchange, SharePoint, OneDrive, and Teams to locate sensitive data for GDPR data mapping purposes.

Question 4

FedRAMP authorization requires that cloud services used by US federal agencies meet which baseline security controls framework?

Accepted Answer

NIST SP 800-53

Answer

FedRAMP is based on NIST SP 800-53 security controls, requiring cloud providers to implement and document these controls at Low, Moderate, or High impact levels.

Question 5

A SOC analyst receives a Microsoft Defender for Cloud alert about a resource that violates a regulatory compliance control. What is the recommended first step?

Accepted Answer

Review the compliance recommendation details and assess the risk before remediating

Answer

The recommended first step is to review the compliance recommendation details in Defender for Cloud to understand the violation and assess risk before taking remediation action.

(SC-200) Microsoft Security Operations Analyst Practice Test

(SC-200) Microsoft Security Operations Analyst Practice Test

SC-200 Compliance & Regulatory Frameworks 3