Describe Microsoft Service Trust Portal and Privacy Principles SC-900 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A compliance analyst needs to find a list of all Microsoft cloud services that are in scope for a specific compliance offering, such as HIPAA. Where should the analyst look on the Service Trust Portal?

   • AThe Service Trust Portal's search bar, typing 'HIPAA services'
   • BThe Privacy section, under the HIPAA privacy impact assessment
   • CThe Compliance Offerings page, then select HIPAA to see the in-scope services
   • DThe Audit Reports section, by selecting the HIPAA report
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   How does Microsoft provide users with control over their personal data?

   • ABy providing users with the ability to modify Microsoft's security policies.
   • BBy offering tools like the Privacy dashboard, where users can view and manage their data.
   • CBy allowing users to access all data stored in Microsoft's data centers.
   • DBy automatically deleting all user data after one year.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the purpose of the security and privacy reports available on the Service Trust Portal?

   • ATo list all security vulnerabilities discovered in Microsoft products and their patches.
   • BTo offer recommendations for configuring firewalls and network security devices.
   • CTo provide a real-time feed of cyberattacks targeting Microsoft cloud services.
   • DTo provide detailed information about Microsoft's security and privacy practices, including control implementation details.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Why would an organization need to access audit reports on the Service Trust Portal?

   • ATo configure data loss prevention policies in Microsoft 365.
   • BTo troubleshoot performance issues in Microsoft 365 applications.
   • CTo fulfill regulatory requirements by demonstrating that Microsoft cloud services meet specific compliance standards.
   • DTo learn about new features in Microsoft cloud services.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company is drafting a data protection policy and wants to align it with Microsoft's privacy principles. The policy states that personal data should be protected using encryption and access controls. Which Microsoft privacy principle does this policy align with?

   • ATransparency
   • BData Minimization
   • CSecurity
   • DUser Control
   Reveal Solution Discussion Select an answer first