Describe Compliance Management Capabilities of Microsoft Purview SC-900 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security administrator wants to access Compliance Manager to review assessments, but the Microsoft Purview portal shows no Compliance Manager card on the home page. The administrator has the necessary permissions. What is the most likely cause?

   • AThe administrator is not a Global Administrator, so Compliance Manager is hidden.
   • BCompliance Manager has been disabled by default and must be enabled by Microsoft support.
   • CThe administrator is using the wrong portal URL or the tenant does not have the required license.
   • DThe administrator's browser is blocking the Compliance Manager card due to privacy settings.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   Your organization is subject to both ISO 27001 and NIST 800-53. You need to track compliance for both frameworks separately, but you want to avoid duplicating work for overlapping controls. What should you do in Microsoft Purview Compliance Manager?

   • ACreate a single assessment that combines both regulations into one custom template.
   • BCreate two separate assessments, one for each regulation, and implement the same improvement action once for both.
   • CCreate two assessments and implement improvement actions separately for each.
   • DUse the default data protection baseline assessment only, as it covers all regulations.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   Your organization's compliance score in Microsoft Purview Compliance Manager is currently 60 out of 100. Management wants to understand which specific improvement actions would most increase the score. What should you review in Compliance Manager?

   • AThe list of improvement actions sorted by potential score increase
   • BThe data protection baseline report
   • CThe audit log of user activities
   • DThe list of assessments that are not yet activated
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   Your organization wants to reduce the effort required to maintain compliance across multiple regulations that share common controls. What is a benefit of using Compliance Manager's improvement actions?

   • AIt automatically implements all controls for you
   • BIt provides a single score for all regulations combined
   • CImplementing an improvement action once can satisfy requirements across multiple assessments
   • DIt eliminates the need for external audits
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   Your organization has multiple assessments in Compliance Manager, and you want to ensure that improvement actions are consistently tracked across all assessments. What is the best practice?

   • AUse the same improvement action for overlapping controls across assessments
   • BExport all assessments to Excel for tracking
   • CUse the data protection baseline assessment for all tracking
   • DCreate separate improvement actions for each assessment
   Reveal Solution Discussion Select an answer first