SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Compliance Manager

  Why this is correct

  Microsoft Purview Compliance Manager is specifically engineered to help organizations manage their compliance posture against various regulatory standards and industry certifications. It provides a dashboard to assess current compliance status, offers actionable recommendations to improve the compliance score, and tracks progress over time. This tool simplifies the complex task of understanding and implementing necessary controls to meet regulatory obligations, such as those relevant to healthcare.

• ✗

  Insider Risk Management

  Why it's wrong here

  Microsoft Purview Insider Risk Management focuses on detecting, investigating, and acting on risky activities by internal users that could lead to data leakage, intellectual property theft, or other security incidents. It leverages machine learning to identify unusual or suspicious user behaviors, such as downloading large amounts of sensitive data or accessing restricted files. While crucial for security, its primary function is not to provide a holistic compliance score against external regulatory frameworks but rather to mitigate internal threats.

• ✗

  Communication Compliance

  Why it's wrong here

  Microsoft Purview Communication Compliance is designed to help organizations detect and prevent policy violations in internal and external communications across various Microsoft 365 services like Exchange, Teams, and Yammer. It uses intelligent templates and machine learning to identify content that violates corporate policies or regulatory requirements, such as harassment, discriminatory language, or sharing of sensitive information. Although it supports compliance by enforcing communication policies, it does not assess an organization's overall compliance posture or generate a quantifiable compliance score against specific standards.

• ✗

  Audit

  Why it's wrong here

  Microsoft Purview Audit provides a comprehensive logging service that records user and administrator activities across Microsoft 365 services, including SharePoint, Exchange, and Azure Active Directory. These detailed audit logs are invaluable for security investigations, forensic analysis, and demonstrating adherence to specific internal controls or regulatory requirements. However, Audit is a data collection and retention service; it does not actively assess an organization's compliance posture, provide a compliance score, or offer direct recommendations for improving compliance against external standards.

Go deeper

Related to this question