Your organization is a small business with a Microsoft 365 Business Standard license. You want to use Compliance Manager to assess your compliance with GDPR. What is the most likely limitation you will encounter?

Compliance Manager is not included in Microsoft 365 Business Standard

Compliance Manager only supports ISO 27001

GDPR assessments are not available in Compliance Manager

Compliance Manager cannot be accessed from a small business portal

A compliance team wants to use the compliance score to drive continuous improvement. They plan to review the score monthly and take action. Which two actions should they take to effectively use the compliance score? Select all that apply.

Only focus on Microsoft-managed controls because they are easier to implement.

Export the compliance score report once and share it with executives.

Delete assessments that have low scores to improve the overall score.

Review the compliance score history to identify trends and areas of decline.

Assign improvement actions to responsible owners with due dates.

Your organization is a healthcare provider that must comply with HIPAA. You need to assess your compliance against HIPAA controls. What should you do in Compliance Manager?

Use the default data protection baseline assessment

Use the Microsoft Defender for Cloud regulatory compliance dashboard

Create a new assessment using the HIPAA template

Create a custom assessment from scratch

A compliance manager wants to demonstrate to the board that the organization is making progress on compliance. The manager needs a simple metric that reflects the percentage of implemented controls across all active assessments. Which Compliance Manager feature should the manager use?

The audit log of user activities in the Microsoft Purview portal.

The compliance score shown on the Compliance Manager dashboard.

The regulatory template list in the Microsoft Purview portal.

The list of improvement actions with their assigned owners.

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 4Objective 2

Describe Compliance Management Capabilities of Microsoft Purview SC-900 Practice Questions (Page 4)

Part of the Describe the capabilities of Microsoft compliance solutions domain, which accounts for 20–25% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~4–8 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

20–25%of the exam

Questions 16–20

16expert · medium
Your organization is a small business with a Microsoft 365 Business Standard license. You want to use Compliance Manager to assess your compliance with GDPR. What is the most likely limitation you will encounter?
Select an answer first
17foundation · easy
Which feature of Compliance Manager allows organizations to track their compliance activities and assign tasks to users?
Select an answer first
18expert · hard · select all that apply
A compliance team wants to use the compliance score to drive continuous improvement. They plan to review the score monthly and take action. Which two actions should they take to effectively use the compliance score? Select all that apply.
Select an answer first
19application · easy
Your organization is a healthcare provider that must comply with HIPAA. You need to assess your compliance against HIPAA controls. What should you do in Compliance Manager?
Select an answer first
20application · easy
A compliance manager wants to demonstrate to the board that the organization is making progress on compliance. The manager needs a simple metric that reflects the percentage of implemented controls across all active assessments. Which Compliance Manager feature should the manager use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.