SC-400 Compliance Management & Risk Assessment 5

Question 1

A compliance manager wants to compare their organization's compliance score against industry peers. Which Compliance Manager feature supports this benchmark view?

Accepted Answer

Industry benchmark comparison in the compliance score dashboard

Answer

The Compliance Manager compliance score dashboard includes an industry benchmark view to compare your score against similar organizations.

Question 2

An organization wants to reduce compliance risk by ensuring sensitive data is never stored in unmanaged personal devices. Which Microsoft Purview capability most directly addresses this?

Accepted Answer

Sensitivity labels with protection settings enforced by Intune MAM policies

Answer

Sensitivity labels combined with Intune Mobile Application Management (MAM) policies prevent sensitive data from being stored on unmanaged personal devices.

Question 3

When performing a risk assessment, an analyst discovers that employees frequently email sensitive customer data to personal accounts. Which SC-400 solution provides the most targeted remediation?

Accepted Answer

Implement a DLP policy that blocks or alerts on external email transfers of sensitive data

Answer

A DLP policy targeting sensitive data in outbound email provides direct prevention and alerting for this specific exfiltration risk.

Question 4

A company must demonstrate continuous compliance monitoring to auditors rather than point-in-time snapshots. Which Compliance Manager capability supports this requirement?

Accepted Answer

Continuous automatic control testing updates from Microsoft Secure Score

Answer

Compliance Manager continuously updates certain control statuses through integration with Microsoft Secure Score, providing near-real-time compliance monitoring.

Question 5

An auditor requests proof that the organization's data retention policies are being enforced. Which tool in Microsoft Purview generates a report of items preserved by retention policies?

Accepted Answer

Data lifecycle management disposition reviews and reports

Answer

Data lifecycle management in Microsoft Purview provides disposition review reports showing items preserved or disposed of under retention policies.

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

SC-400 Compliance Management & Risk Assessment 5