Free SC-900 Microsoft Purview Compliance Manager Questions and Answers — Questions and Answers
Question 1: What does the compliance score in Microsoft Purview Compliance Manager primarily measure?
- The number of compliance documents stored in SharePoint.
- The financial cost of non-compliance.
- Progress in completing recommended risk-reducing actions. (Correct answer)
- The number of users who have completed compliance training.
Correct answer: Progress in completing recommended risk-reducing actions.
The compliance score measures your progress in completing actions that help reduce risks around data protection and regulatory standards. It provides a quantifiable measure of your organization's compliance posture based on the implementation of recommended controls.
Question 2: In Compliance Manager, what is the purpose of an 'improvement action'?
- To report a security incident to Microsoft.
- A recommended task to help centralize data governance and reduce risk. (Correct answer)
- A control that is managed exclusively by Microsoft.
- A policy that automatically blocks non-compliant user activity.
Correct answer: A recommended task to help centralize data governance and reduce risk.
Improvement actions are tasks recommended by Microsoft to help you align with data protection regulations and standards. Completing these actions, which are your responsibility, directly increases your compliance score.
Question 3: How does Microsoft Purview Compliance Manager help organizations understand their shared compliance responsibilities?
- By providing a list of third-party auditors.
- By automatically implementing all required controls.
- By assigning all responsibility to the customer.
- By detailing which controls are managed by Microsoft versus the customer. (Correct answer)
Correct answer: By detailing which controls are managed by Microsoft versus the customer.
Compliance Manager clearly delineates between actions managed by Microsoft and actions managed by the customer. This helps organizations understand which controls they are responsible for implementing to meet the requirements of a specific regulation or standard.
Question 4: What is the function of assessment templates in Compliance Manager?
- To create templates for user-facing compliance reports.
- To provide frameworks for assessing compliance against specific regulations. (Correct answer)
- To design email templates for compliance notifications.
- To store evidence and documentation for legal holds.
Correct answer: To provide frameworks for assessing compliance against specific regulations.
Assessment templates are pre-built frameworks for specific regulations and standards, like GDPR or ISO 27001. They provide the necessary controls and improvement actions required to assess your compliance against that particular standard.
Question 5: If your organization improves its compliance score from 60% to 75%, what does this change signify?
- The organization has purchased more Microsoft 365 licenses.
- Microsoft has updated its own internal controls.
- The organization has completed more recommended improvement actions. (Correct answer)
- The number of active security alerts has decreased.
Correct answer: The organization has completed more recommended improvement actions.
An increase in the compliance score directly reflects that the organization has successfully implemented more of the recommended improvement actions. This indicates a stronger compliance posture and a reduction in risks associated with data protection and regulatory standards.
Question 6: Which of the following best describes a 'control' in the context of Microsoft Purview Compliance Manager?
- A user permission setting in Microsoft Entra ID.
- A firewall rule that blocks network traffic.
- A requirement of a regulation or standard. (Correct answer)
- A dashboard widget that shows real-time data.
Correct answer: A requirement of a regulation or standard.
A control is a requirement of a regulation, standard, or policy. Compliance Manager maps these controls to specific improvement actions, helping you understand how to meet each requirement.
What does the compliance score in Microsoft Purview Compliance Manager primarily measure?