Describe Microsoft Service Trust Portal and Privacy Principles SC-900 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a key function of the Microsoft Service Trust Portal?

   • AIt provides access to independent audit reports and compliance guides for Microsoft cloud services.
   • BIt enables administrators to configure security policies for their Microsoft 365 tenants.
   • CIt provides a real-time dashboard of security incidents affecting Microsoft cloud services.
   • DIt allows users to download and install Microsoft software updates.
   Reveal Solution Discussion Select an answer first
2. 2expert · medium

   A security architect is designing a data protection strategy for a customer that uses Microsoft 365. The architect needs to explain to the customer how Microsoft protects their data at rest. Which statement is accurate?

   • AEncryption at rest is only available in the Service Trust Portal
   • BCustomers must provide their own encryption keys for all Microsoft 365 services
   • CMicrosoft does not encrypt data at rest by default
   • DMicrosoft uses encryption at rest for data stored in Microsoft 365, with customer-managed keys available for some services
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A security auditor is reviewing Microsoft 365's compliance documentation to prepare for an external audit. The auditor needs to verify that Microsoft has a current ISO 27001 certificate and also wants to understand the scope of the certification. Which two resources on the Service Trust Portal should the auditor use together?

   • AAudit Reports for the certificate and Data Protection Resources for the scope description
   • BCompliance Manager for the certificate and the Privacy Statement for the scope
   • CIndustries & Regions for the certificate and Audit Reports for the scope
   • DService Trust Portal FAQ for the certificate and the admin center for the scope
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What does the principle of data minimization mean in the context of Microsoft's data handling?

   • AMicrosoft stores data in the smallest possible data centers to reduce costs.
   • BMicrosoft shares data only with partners that have signed a non-disclosure agreement.
   • CMicrosoft deletes all user data after 30 days by default.
   • DMicrosoft collects only the data that is necessary for the specific purpose it is being used for.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security auditor needs to verify that Microsoft 365 has been independently audited for the past three years. What is the most efficient way to find the relevant audit reports on the Service Trust Portal?

   • AContact Microsoft support to request historical audit reports.
   • BDownload the most recent SOC 2 report and assume it covers previous years.
   • CReview the Compliance Manager assessments to see historical audit results.
   • DUse the Audit Reports section and filter by date range to find reports from the past three years.
   Reveal Solution Discussion Select an answer first