Your organization is a financial services company that must comply with both PCI DSS and the Gramm-Leach-Bliley Act (GLBA). You need to assign responsibility for specific improvement actions to different teams. What should you use in Compliance Manager?

Use the data protection baseline assessment

Assign an owner and due date to each improvement action

Create a separate assessment for each team

Export the compliance score report

Your organization is a multinational company that must comply with GDPR in the EU and CCPA in California. You have limited resources and need to prioritize compliance efforts. What is the most effective approach in Compliance Manager?

Create separate assessments for GDPR and CCPA, and prioritize improvement actions that are common to both

Focus only on GDPR because it is more comprehensive

Create a single custom assessment that combines GDPR and CCPA

Use the data protection baseline assessment for both

How is the compliance score calculated in Compliance Manager?

Based on the completion of improvement actions and their associated points

Based on the number of assessments created

Based on the number of users with administrative roles

Based on the amount of data stored in Microsoft 365

Which of the following is a benefit of using the compliance score to track compliance progress?

It prevents all data breaches from occurring

It eliminates the need for any manual compliance monitoring

It provides a measurable way to demonstrate compliance improvements over time

It automatically generates audit reports for external regulators

A new compliance analyst needs to access the Microsoft Purview portal to review the organization's compliance posture. The analyst has been granted the appropriate permissions. What should the analyst use to access the portal?

https://compliance.microsoft.com

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 4Objective 2

Describe Compliance Management Capabilities of Microsoft Purview SC-900 Practice Questions (Page 2)

Part of the Describe the capabilities of Microsoft compliance solutions domain, which accounts for 20–25% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~4–8 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

20–25%of the exam

Questions 6–10

6application · medium
Your organization is a financial services company that must comply with both PCI DSS and the Gramm-Leach-Bliley Act (GLBA). You need to assign responsibility for specific improvement actions to different teams. What should you use in Compliance Manager?
Select an answer first
7expert · medium
Your organization is a multinational company that must comply with GDPR in the EU and CCPA in California. You have limited resources and need to prioritize compliance efforts. What is the most effective approach in Compliance Manager?
Select an answer first
8foundation · easy
How is the compliance score calculated in Compliance Manager?
Select an answer first
9foundation · easy
Which of the following is a benefit of using the compliance score to track compliance progress?
Select an answer first
10application · easy
A new compliance analyst needs to access the Microsoft Purview portal to review the organization's compliance posture. The analyst has been granted the appropriate permissions. What should the analyst use to access the portal?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.