Your organization uses Azure AI Vision to analyze surveillance images for security threats. The solution must comply with GDPR. Which TWO actions should you take?
Prevents personal data in logs.
Why this answer
Disabling logging of request and response data is a direct measure to minimize personal data processing, which aligns with GDPR's data minimization principle. Azure AI Vision logs can contain image metadata and analysis results that may include personal data, so disabling logging reduces GDPR compliance risk. Option E is correct because GDPR requires that personal data of EU residents be stored within the EU, and configuring a specific data residency region ensures compliance with this requirement.
Exam trap
The trap here is that candidates often confuse security controls (encryption, private endpoints) with GDPR compliance requirements, overlooking that GDPR specifically mandates data residency and minimization of data processing, not just protection of data in transit or at rest.