AZ-900 Describe cloud concepts Practice Question
What is the Microsoft Trust Center?
⚠ Common exam trap
It's easy for candidates to confuse the Microsoft Trust Center with operational or management tools like Azure Security Center or Azure Policy, because all relate to security, but the Trust Center is purely informational and not a functional service.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A website providing information about Microsoft's security, privacy, and compliance practices
The Microsoft Trust Center is a dedicated website that provides detailed information about Microsoft's security, privacy, and compliance practices. It serves as a central resource for customers to understand how Microsoft protects their data, including certifications, audit reports, and regulatory compliance documentation. This aligns with the need for transparency in cloud services, making option B correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A tool for managing Azure resource permissions
Why it's wrong here
Azure resource permissions are actually managed through Azure Role-Based Access Control (RBAC), where you assign roles to users, groups, or service principals at specific scopes. The Trust Center is not an interactive management tool; it is a public informational website that publishes compliance and security documentation. It provides no mechanism to create role assignments, define custom roles, or enforce access policies, so it cannot be used to manage permissions.
- ✓
A website providing information about Microsoft's security, privacy, and compliance practices
Why this is correct
The Microsoft Trust Center is a publicly accessible website that aggregates security, privacy, and compliance information about Microsoft's cloud services. It includes detailed documentation on certifications (e.g., ISO 27001, SOC 2), data protection policies, privacy principles, and how Microsoft handles government data requests. This is exactly the purpose of the Trust Center: to provide transparency and help customers evaluate Microsoft's cloud trust posture, not to act as an operational tool or service.
- ✗
A monitoring service for Azure infrastructure health
Why it's wrong here
Azure infrastructure health is monitored by Azure Service Health and Azure Resource Health, which provide real-time status, personalized alerts, and root cause analysis for outages. The Trust Center, in contrast, is a static compliance and transparency portal that publishes audit reports and standards mappings. It does not offer any live telemetry, incident notifications, or health metrics, so it cannot serve as an infrastructure monitoring service.
- ✗
An Azure portal feature for security recommendations
Why it's wrong here
Security recommendations for your Azure workloads are generated by Microsoft Defender for Cloud (formerly Azure Security Center) and Azure Advisor, which analyze configurations and suggest remediation actions. The Trust Center is not an Azure portal feature; it is an external website separate from the Azure portal. It does not assess your environment, produce recommendations, or integrate with your subscriptions, so it cannot provide security guidance tailored to your resources.
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Trust Center
A Trust Center is a centralized portal or collection of resources where an organization publishes its security, compliance, privacy, and data protection policies to build customer and stakeholder confidence.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.