SC-200 Governance & Compliance 2

Question 1

In Microsoft Sentinel, which feature allows you to track compliance with regulatory frameworks such as NIST and ISO 27001?

Accepted Answer

Microsoft Defender for Cloud regulatory compliance dashboard

Answer

Microsoft Defender for Cloud provides a regulatory compliance dashboard that maps your resources against standards like NIST SP 800-53 and ISO 27001.

Question 2

A security analyst needs to ensure that audit logs are retained for 90 days in Microsoft Sentinel. Which workspace setting controls log retention?

Accepted Answer

Log Analytics workspace retention settings

Answer

Log retention in Microsoft Sentinel is controlled by the underlying Log Analytics workspace retention settings, configurable from 30 to 730 days.

Question 3

Which Microsoft Sentinel feature enables you to assign, track, and close security findings to meet audit and compliance requirements?

Accepted Answer

Incidents

Answer

Sentinel Incidents serve as the primary mechanism for tracking security findings, assigning owners, and documenting resolution for audit purposes.

Question 4

An organization must ensure no user can disable audit logging in Azure. Which governance control enforces this?

Accepted Answer

Azure Policy with Deny effect

Answer

An Azure Policy with a Deny effect can block actions that would disable diagnostic settings or audit logging, enforcing continuous compliance.

Question 5

Under GDPR requirements, a security operations team discovers a data breach. What is the maximum notification window to the supervisory authority?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires organizations to notify the relevant supervisory authority within 72 hours of becoming aware of a personal data breach.

(SC-200) Microsoft Security Operations Analyst Practice Test