How can an organization use the security and privacy reports from the Service Trust Portal?

To configure Microsoft 365 security settings directly from the reports.

To support their own compliance assessments and audits by providing evidence of Microsoft's controls.

To receive automatic alerts when Microsoft's security posture changes.

To access real-time threat intelligence and vulnerability information.

A financial auditor needs to verify that Microsoft 365 has maintained continuous compliance with SOC 2 over the past two years. The auditor asks for evidence of both the audit reports and the scope of the audits. What is the most efficient way to provide this evidence?

Provide the auditor with the current SOC 2 report and a letter from Microsoft confirming past compliance.

Use Compliance Manager to generate a report showing the tenant's compliance over time.

Download the SOC 2 reports for both years and the corresponding scope documents from the Service Trust Portal.

Share the Microsoft Privacy Statement and the Trust Center's security overview.

How does Microsoft apply the principle of data minimization in its services?

By providing users with a dashboard to view their data.

By storing data in multiple geographic regions for redundancy.

By collecting only the data needed to provide the requested service and not using it for unrelated purposes.

By encrypting all data at rest and in transit.

An IT administrator at a healthcare organization needs to confirm that Microsoft 365 has a current ISO 27001 certification before the organization renews its business associate agreement. The administrator must provide the certification document to the legal team. Where should the administrator look?

Service Trust Portal under Audit Reports

Microsoft Privacy Statement webpage

Microsoft 365 admin center under Health

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 4Objective 1

Describe Microsoft Service Trust Portal and Privacy Principles SC-900 Practice Questions (Page 8)

Part of the Describe the capabilities of Microsoft compliance solutions domain, which accounts for 20–25% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~4–8 in this domain), expect 1–2 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

9concepts

20–25%of the exam

Questions 36–40

36foundation · easy
How can an organization use the security and privacy reports from the Service Trust Portal?
Select an answer first
37expert · hard
A financial auditor needs to verify that Microsoft 365 has maintained continuous compliance with SOC 2 over the past two years. The auditor asks for evidence of both the audit reports and the scope of the audits. What is the most efficient way to provide this evidence?
Select an answer first
38foundation · easy
How does Microsoft apply the principle of data minimization in its services?
Select an answer first
39application · easy
An IT administrator at a healthcare organization needs to confirm that Microsoft 365 has a current ISO 27001 certification before the organization renews its business associate agreement. The administrator must provide the certification document to the legal team. Where should the administrator look?
Select an answer first
40application · easy
A user is concerned about how a Microsoft online service uses their personal data. The user wants to see what data Microsoft has collected and then delete it. Which Microsoft privacy principle directly supports this user's request?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.

Describe Microsoft Service Trust Portal and Privacy Principles SC-900 Practice Questions (Page 8)

Questions 36–40

How can an organization use the security and privacy reports from the Service Trust Portal?

A financial auditor needs to verify that Microsoft 365 has maintained continuous compliance with SOC 2 over the past two years. The auditor asks for evidence of both the audit reports and the scope of the audits. What is the most efficient way to provide this evidence?

How does Microsoft apply the principle of data minimization in its services?

A user is concerned about how a Microsoft online service uses their personal data. The user wants to see what data Microsoft has collected and then delete it. Which Microsoft privacy principle directly supports this user's request?

Keep studying — Describe the capabilities of Microsoft compliance solutions