SC-400 Compliance Management & Risk Assessment 3

Question 1

Your organization must comply with NIST 800-53. Which Compliance Manager assessment template tier includes NIST 800-53 without an additional license?

Accepted Answer

Included templates available with Microsoft 365 E5 or Compliance add-on

Answer

NIST 800-53 is a premium template in Compliance Manager available with Microsoft 365 E5 or the Compliance add-on license.

Question 2

A company operates in both the EU and the US. They need to assess compliance against both GDPR and CCPA. What is the recommended approach in Compliance Manager?

Accepted Answer

Create separate assessments for GDPR and CCPA

Answer

Creating separate assessments for GDPR and CCPA allows independent tracking of compliance posture and improvement actions for each regulation.

Question 3

In the context of SC-400, what does 'control testing' refer to in Compliance Manager?

Accepted Answer

Documenting evidence and updating the implementation status of controls

Answer

Control testing in Compliance Manager means documenting evidence and marking implementation status for each control to reflect real-world compliance.

Question 4

An administrator notices that some improvement actions in Compliance Manager show 'Microsoft managed' status. What does this indicate?

Accepted Answer

Microsoft has completed those controls on behalf of the customer

Answer

Microsoft managed controls are responsibilities that Microsoft fulfills as part of operating the cloud platform, contributing to the shared responsibility model.

Question 5

Which metric in Compliance Manager represents the weighted value of completing improvement actions relative to the total possible points?

Accepted Answer

Compliance score

Answer

The compliance score in Compliance Manager is a percentage based on weighted points earned from completed improvement actions versus total possible points.

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

SC-400 Compliance Management & Risk Assessment 3