Describe Microsoft Service Trust Portal and Privacy Principles SC-900 Practice Questions (Page 4)

Questions 16–20

1. 16expert · easy

   A compliance manager at a global organization needs to verify that Microsoft 365 meets regulatory requirements in multiple regions. The manager wants to access the most comprehensive set of compliance resources in one place. What should the manager use?

   • AService Trust Portal, which provides audit reports, white papers, and compliance guides
   • BMicrosoft Privacy Statement, which explains data handling
   • CAzure Active Directory, which manages user identities
   • DMicrosoft 365 admin center, which shows service health and licensing
   Reveal Solution Discussion Select an answer first
2. 17application · easy

   A compliance analyst needs to verify that Microsoft 365 has undergone a recent independent audit for security controls. The analyst has access to the Service Trust Portal. Which section should the analyst navigate to first?

   • ACompliance Manager
   • BData Protection Resources
   • CAudit Reports
   • DIndustries & Regions
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security officer is evaluating Microsoft 365 for a government client that requires assurance that data is protected at rest and in transit. The officer also needs to verify that Microsoft's security controls are independently audited. What combination of resources should the officer review?

   • AThe Microsoft Trust Center's encryption documentation and the SOC 2 audit report
   • BThe Microsoft Privacy Statement and the ISO 27001 certificate
   • CThe Compliance Manager dashboard and the FedRAMP authorization
   • DThe Service Trust Portal's search bar and the Azure Security Center
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A compliance team is preparing for a customer audit and needs to provide evidence that Microsoft 365 has been audited for security and privacy. They have a tight deadline and need to find the most relevant reports quickly. The customer specifically asks for a report that covers both security and privacy controls. Which report should the team prioritize?

   • AThe ISO 27001 certificate
   • BThe FedRAMP authorization letter
   • CThe SOC 2 Type II report
   • DThe Microsoft Privacy Statement
   Reveal Solution Discussion Select an answer first
6. 20application · easy

   A privacy advocate wants to know how Microsoft ensures that customers can understand what data is collected and how it is used. The advocate is reviewing Microsoft's public documentation. Which resource best demonstrates Microsoft's commitment to transparency?

   • AAzure Active Directory sign-in logs
   • BMicrosoft Privacy Statement and transparency documentation
   • CService Trust Portal audit reports
   • DMicrosoft 365 admin center usage reports
   Reveal Solution Discussion Select an answer first