Describe Compliance Management Capabilities of Microsoft Purview SC-900 Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   An organization has two active assessments in Compliance Manager: one for GDPR and one for ISO 27001. The compliance team wants to improve the overall compliance score, but they have limited resources. They need to decide which improvement actions to implement first. What should they do?

   • AFocus only on improvement actions that are marked as mandatory by the regulatory templates.
   • BImplement all improvement actions from the GDPR assessment first, then move to ISO 27001.
   • CPrioritize improvement actions that are shared across both assessments and have the highest potential point contribution.
   • DImplement improvement actions in alphabetical order to ensure fairness across assessments.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is a key benefit of using the compliance score in Compliance Manager?

   • AIt guarantees that the organization will pass all compliance certifications
   • BIt replaces the need for external audits
   • CIt automatically enforces all compliance requirements without manual effort
   • DIt helps organizations prioritize improvement actions based on their potential impact
   Reveal Solution Discussion Select an answer first
4. 43expert · medium

   Your organization is considering using the compliance score to benchmark against industry peers. Management asks if the compliance score can be compared across organizations. What should you tell them?

   • ACompliance scores are confidential and cannot be shared
   • BCompliance scores are not directly comparable because they depend on the assessments and actions selected
   • CCompliance scores are only comparable within the same industry
   • DCompliance scores are standardized and can be compared across all organizations
   Reveal Solution Discussion Select an answer first
5. 44expert · medium

   Your organization is a cloud service provider that must demonstrate compliance with ISO 27001 to customers. You have implemented all improvement actions in Compliance Manager, but the compliance score is still below 100. What is the most likely reason?

   • ASome improvement actions are not applicable to your organization and are excluded from the score
   • BThe compliance score only reflects Microsoft's controls, not your own
   • CYou have not activated the ISO 27001 assessment
   • DThe compliance score is capped at 90 for all organizations
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   In Compliance Manager, what is an assessment used for?

   • ATo manage user access to Microsoft 365 services
   • BTo monitor network traffic for malicious activity
   • CTo create data loss prevention policies
   • DTo evaluate an organization's compliance against a specific regulation or standard
   Reveal Solution Discussion Select an answer first