Capabilities of Microsoft Compliance Solutions

Describe the Service Trust Portal, privacy principles, Microsoft Purview compliance management, information protection, data governance, insider risk, eDiscovery, and audit.

5 minutes 5 Questions

Microsoft Compliance Solutions offer a comprehensive suite of capabilities designed to help organizations meet regulatory requirements, protect sensitive data, and manage risks effectively. Here are the key capabilities: **1. Microsoft Purview Compliance Portal:** This centralized portal provides …

Concepts covered
Content Explorer and Activity ExplorerMicrosoft Privacy PrinciplesMicrosoft Purview PortalCompliance Score Uses and BenefitsRecords ManagementInsider Risk ManagementAudit Solutions in Microsoft PurviewData Classification CapabilitiesService Trust Portal OfferingsMicrosoft PrivaCompliance Manager in Microsoft PurvieweDiscovery Solutions in Microsoft PurviewSensitivity Labels and Sensitivity Label PoliciesData Loss Prevention (DLP)Retention Policies, Labels, and Label Policies
Test mode:
Start practice test

SC-900 - Capabilities of Microsoft Compliance Solutions Example Questions

Test your knowledge of Capabilities of Microsoft Compliance Solutions

Question 1

A new IT administrator at a company is asked to look up when a specific user last accessed a SharePoint file. The administrator opens the Microsoft Purview compliance portal and navigates to the Audit solution. After entering the user's name and selecting the date range, the administrator notices there are multiple activity types available to filter the search. Which activity type should the administrator select to find file access events in SharePoint?

Correct Answer: Select 'Accessed file' under the File and page activities category

The 'Accessed file' activity under File and page activities is the correct filter because it specifically logs when a user opens or views a file in SharePoint, which directly corresponds to file access events.

'Downloaded file' tracks when a user downloads a file to their local device, not simply accessing it. 'Viewed pages' relates to viewing SharePoint site pages rather than accessing specific files. 'Shared file' under Sharing and access request activities captures sharing actions, not file access events.

The key concept tested is understanding Microsoft Purview audit log activity types and selecting the appropriate activity filter to track specific user actions in SharePoint.

Question 2

An organization holds sensitive data spread across on-premises servers, third-party cloud applications, and Azure services. The data compliance team requires a centralized interface to analyze data governance, map data landscapes, and manage risk policies across all these environments. Which interface provides this unified management capability?

Correct Answer: The Microsoft Purview compliance portal

The Microsoft Purview compliance portal is the right answer because it delivers a unified data governance solution to map, classify, and manage compliance policies across on-premises, multi-cloud, and third-party software as a service data landscapes.

The Microsoft Defender continuous security dashboard is incorrect because it focuses on threat detection and security posture rather than data governance. The Microsoft Entra identity governance admin center is incorrect as it manages user identities and access lifecycles. The Microsoft Intune unified compliance interface is incorrect because Intune manages endpoint devices and applications.

Key concept tested: Identifying the primary Microsoft interface for unified data governance and compliance.

Question 3

Which of the following correctly describes the foundational intent behind Microsoft's 'Transparency' privacy principle?

Correct Answer: Ensuring people are informed about how their data is collected, used, and shared through clear communication

Microsoft's Transparency principle is fundamentally about being open and honest with people regarding how their personal data is collected, used, and shared, ensuring clear and accessible communication so individuals understand data practices.

One option describes the Control principle, which focuses on giving users tools to manage their data preferences. Another option describes the Collection principle (or purpose limitation), which limits data gathering to specific legitimate purposes. Another option describes the Security principle, which focuses on protecting data through encryption and access controls.

The key concept tested is understanding Microsoft's six core privacy principles and specifically distinguishing Transparency from Control, Collection, and Security.

More Capabilities of Microsoft Compliance Solutions questions
627 questions (total)
Practice 100 questions
One session at a time, always new questions