Describe Microsoft Service Trust Portal and Privacy Principles SC-900 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A risk manager at a government contractor needs to provide evidence that Microsoft 365 has been independently audited against FedRAMP requirements. The manager must submit the audit report to a federal agency. What should the manager do first?

   • AUse Microsoft Purview Compliance Manager to generate a FedRAMP report
   • BRequest the report from Microsoft support via email
   • CSign in to the Service Trust Portal and download the FedRAMP audit report
   • DSearch the public Microsoft website for the FedRAMP report
   Reveal Solution Discussion Select an answer first
2. 22expert · medium

   A privacy officer at a multinational company is reviewing Microsoft's transparency practices. The officer wants to ensure that the company's own privacy notices align with Microsoft's approach. Which practice best reflects Microsoft's transparency principle?

   • AProviding users with a tool to export their data
   • BCollecting only the minimum data needed
   • CPublishing clear, easily accessible information about data collection and usage
   • DEncrypting all data in transit and at rest
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A new IT administrator needs to understand the purpose of the Service Trust Portal and what resources are available. Which description accurately describes the Service Trust Portal?

   • AA dashboard that shows the real-time security health of your tenant.
   • BA portal that provides audit reports, compliance offerings, and security whitepapers for Microsoft cloud services.
   • CA marketplace for purchasing compliance add-ons for Microsoft 365.
   • DA tool for managing user permissions and access to Microsoft 365.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A marketing team wants to collect extensive personal data from website visitors, including browsing history and location, to build detailed customer profiles. The organization's privacy officer rejects the request, citing Microsoft's privacy principle of data minimization. What is the primary reason for this rejection?

   • AThe data collection would prevent users from exercising control over their data.
   • BThe data collection would violate the transparency principle because users would not be informed.
   • CThe data collection is not limited to what is necessary for the stated purpose.
   • DThe data collection would require additional security safeguards that are not available.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A product manager wants to add a new feature that requires collecting user location data. The privacy team is concerned about data minimization. The product manager argues that location data is essential for the feature. What is the best way to proceed while respecting data minimization?

   • ACollect location data continuously in the background to improve the feature.
   • BCollect location data and share it with third-party partners for analytics.
   • CCollect location data but anonymize it immediately after collection.
   • DCollect location data only when the user actively uses the feature and retain it only for the session.
   Reveal Solution Discussion Select an answer first