az-900 Practice Question 541
Exam: az-900
Domain: Describe cloud concepts
Topic: Describe cloud computing
Difficulty: medium
Select the answer that correctly completes the sentence.
‘You can review audit reports and compliance-related information for Azure services from
Answer Options
Correct Answer
No explicit options provided (or visual interactive question).
Explanation
Microsoft Service Trust Portal.
The Microsoft Service Trust Portal provides a variety of content, tools, and other resources about Microsoft security, privacy, and compliance
practices.
Trust Documents -
Provides a wealth of security implementation and design information with the goal of making it easier for you to meet regulatory compliance
objectives by understanding how Microsoft Cloud services keep your data secure. To review content, select one of the following options on the
Trust Documents pull-down menu.
* Audit Reports: A list of independent audit and assessment reports on Microsoft's Cloud services is displayed. These reports provide
information about Microsoft
Cloud services compliance with data protection standards and regulatory requirements.
* Data Protection: Contains a wealth of resources such as audited controls, white papers, FAQs, penetration tests, risk assessment tools, and
compliance guides.
* Azure Security and Compliance Blueprints: Resources that help you build secure and compliant cloud-based applications. This area contains
blueprint-guidance for government, finance, healthcare, and retail verticals.
Incorrect:
Not: Microsoft Defender for Cloud.
Defender for Cloud is a tool for security posture management and threat protection. It strengthens the security posture of your cloud resources,
and with its integrated Microsoft Defender plans, Defender for Cloud protects workloads running in Azure, hybrid, and other cloud platforms.
Defender for Cloud provides the tools needed to harden your resources, track your security posture, protect against cyber attacks, and
streamline security management.
Not: the Microsoft 365 Compliance center
The Security & Compliance Center lets you grant permissions to people who perform compliance tasks like device management, data loss
prevention, eDiscovery, retention, and so on. These people can perform only the tasks that you explicitly grant them access to.