Describe Microsoft Service Trust Portal and Privacy Principles SC-900 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of Microsoft's security safeguards for user data?

   • ATo allow Microsoft to access user data for marketing purposes.
   • BTo protect data from unauthorized access, disclosure, and modification.
   • CTo reduce the cost of data storage by using compression.
   • DTo simplify the process of sharing data with government agencies.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A product manager at a software company is designing a new telemetry feature for a mobile app. The manager wants to align with Microsoft's privacy principles, specifically minimizing data collection while still providing useful diagnostics. Which approach best reflects the principle of data minimization?

   • AAsk users to opt in to all data collection with a single consent prompt
   • BCollect anonymous data only, regardless of whether it is useful for diagnostics
   • CCollect only the diagnostic data needed to fix the specific issues the feature is designed to detect
   • DCollect all possible telemetry now so future features will not need additional data
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What can a user do through the Microsoft Privacy dashboard?

   • AConfigure firewall rules for their home network.
   • BView and delete personal data that Microsoft has collected.
   • CChange the language settings for all Microsoft services.
   • DSubmit a support ticket to Microsoft.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Where can an organization find independent audit reports, such as SOC 2 and ISO 27001, for Microsoft cloud services?

   • AOn the Microsoft Service Trust Portal.
   • BIn the Microsoft Trust Center blog.
   • CIn the Microsoft 365 admin center under 'Health'.
   • DOn the Azure pricing calculator.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A multinational company is implementing Microsoft 365 and wants to ensure that employees can exercise their data subject rights under GDPR. The legal team is concerned about the process for employees to request data export or deletion. What is the most appropriate way to address this within Microsoft's privacy framework?

   • AUse the Service Trust Portal to request data export on behalf of employees.
   • BRely on Microsoft's automatic deletion of all data after a fixed period.
   • CSet up a custom process in the IT department to handle all data subject requests manually.
   • DInstruct employees to use the Microsoft Privacy dashboard to submit export or deletion requests.
   Reveal Solution Discussion Select an answer first