SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Pre-built compliance assessments for regulations like GDPR

  Why this is correct

  Microsoft Purview Compliance Manager provides a comprehensive library of pre-built assessment templates for various international, governmental, and industry-specific regulations and standards, such as GDPR, ISO 27001, and NIST. These templates help organizations efficiently understand their current compliance posture against specific requirements by mapping them to Microsoft 365 services and controls. This capability streamlines the process of evaluating and reporting compliance.

• ✓

  Scoring to track compliance progress over time

  Why this is correct

  Microsoft Purview Compliance Manager utilizes a dynamic Compliance Score, which is a quantitative measure of an organization's progress in completing recommended actions to address data protection and regulatory compliance risks. This score provides a clear, actionable metric that allows organizations to track their compliance posture over time, identify trends, and prioritize improvement efforts effectively. It helps demonstrate progress to auditors and stakeholders.

• ✗

  Audit log search for user access events

  Why it's wrong here

  While a critical capability within the broader Microsoft Purview suite, audit log search for user access events is specifically provided by Microsoft Purview Audit (Standard and Premium), not Compliance Manager. This feature allows administrators to investigate activities across various Microsoft 365 services, such as SharePoint, Exchange, and Teams, to identify potential security breaches, policy violations, or suspicious user behavior, which is distinct from compliance assessment and management.

• ✓

  Improvement actions to remediate compliance gaps

  Why this is correct

  Microsoft Purview Compliance Manager offers specific improvement actions designed to help organizations address identified compliance gaps and enhance their data protection posture. These actions provide detailed, step-by-step guidance and often link directly to Microsoft 365 services, enabling administrators to implement necessary controls and configurations. This proactive approach helps organizations meet regulatory requirements and continuously improve their overall compliance.

• ✗

  Automated data discovery across cloud sources

  Why it's wrong here

  Automated data discovery across cloud sources is a core capability of the Microsoft Purview Data Map, which automatically scans, classifies, and catalogs data across an organization's hybrid and multi-cloud estate. This functionality builds a unified map of data assets, enabling data governance, lineage tracking, and data sharing. It is distinct from the compliance assessment and management features offered by Microsoft Purview Compliance Manager.

Go deeper

Related to this question