Microsoft Purview Compliance

What does the Microsoft Service Trust Portal provide?

• AA place to configure network security groups for your virtual machines
• BA dashboard for creating and managing your organization's user accounts
• CAudit reports, compliance documentation and security information about Microsoft's services✓
• DA tool for writing, building and deploying the organization's application source code to the cloud

Answer: The Service Trust Portal publishes independent audit reports, compliance guides and details of how Microsoft protects its cloud services. It is not for configuring networking, managing users or deploying code.

What is the purpose of Compliance Manager in Microsoft Purview?

• ATo automatically certify the organization as compliant with regulations such as GDPR and HIPAA
• BTo encrypt the organization's documents stored in the cloud and on its managed Windows devices
• CTo help assess and manage compliance with regulations through improvement actions and a score✓
• DTo provide antivirus scanning for files uploaded to cloud storage

Answer: Compliance Manager helps you assess your compliance posture against regulations and standards, tracks improvement actions and produces a compliance score. It supports the work rather than making you compliant automatically, and is not an encryption or antivirus tool.

What do sensitivity labels in Microsoft Purview allow you to do?

• ADelete documents automatically once they have gone unopened for a full year
• BMeasure how quickly the organization's documents open on its managed devices each day
• CClassify and protect content, for example by encrypting or marking it✓
• DAssign administrator roles to the users who create documents

Answer: Sensitivity labels classify content by its sensitivity and can apply protection such as encryption, watermarks or headers and footers. They do not delete stale files, measure open speed or assign admin roles.

What is the purpose of data loss prevention (DLP) in Microsoft Purview?

• ATo back up the organization's data to a second geographic location
• BTo detect and help prevent the risky sharing of sensitive information✓
• CTo speed up and optimize the network connection to the cloud-based applications in use today
• DTo assign product licenses to the users automatically based on which department they happen to work in

Answer: DLP policies identify sensitive information, such as financial or health data, and help prevent its accidental or inappropriate sharing across email, documents and other locations. It is not a backup, network or licensing feature.

What do retention policies and retention labels in Microsoft Purview control?

• AWhich users are allowed to sign in to the Microsoft 365 tenant
• BHow much network bandwidth each application, and each user, may consume
• CHow long content is kept and when it is deleted, to meet business or legal needs✓
• DThe physical location of the servers that store the content

Answer: Retention policies and labels govern how long information is retained and when it is disposed of, helping meet regulatory and business requirements. They do not control sign-in, bandwidth or server location.

What does insider risk management in Microsoft Purview help detect?

• ARisky activities by people inside the organization, such as data theft before leaving✓
• BExternal attackers scanning the organization's public websites
• CHardware failures in the organization's on-premises servers
• DThe gradual slowing of the performance of the organization's cloud-based applications over time

Answer: Insider risk management uses signals to identify potentially risky activities by internal users, such as data leaks or theft, while incorporating privacy controls. It is not aimed at external scanning, hardware faults or performance.

What is eDiscovery in Microsoft Purview used for?

• ADiscovering new devices as they connect to the corporate network for the first time
• BFinding and managing content that may be needed for legal cases or investigations✓
• CDetecting malware hidden inside email attachments automatically
• DProvisioning new mailboxes and user accounts for all of the employees who are joining the company

Answer: eDiscovery identifies, holds, collects and exports content relevant to legal or internal investigations. It is not a network-discovery, malware-detection or provisioning tool.

What does the audit capability in Microsoft Purview provide?

• AAn automatic financial audit of the organization's annual accounts and tax filings
• BA firewall log showing every packet entering or leaving the virtual network subnet
• CA detailed performance report showing how fast each of the applications is running at present
• DA record of user and admin activities that can be searched for investigations✓

Answer: Purview audit records user and administrator activities across Microsoft 365 services so they can be searched to support investigations and compliance. It is not a financial audit, network firewall log or performance report.

What does data classification in Microsoft Purview help an organization understand?

• AHow many virtual machines are currently up and running in each of the Azure regions that are in use
• BWhich employees have taken their annual security awareness training
• CWhat sensitive information it holds and where that information is located✓
• DThe current market price of each of the organization's monthly cloud service subscriptions today

Answer: Data classification identifies and categorizes sensitive information across the estate, helping the organization see what it holds and where, using trainable classifiers and sensitive information types. It is not about VM counts, training records or pricing.

What is the benefit of Content explorer and Activity explorer in Microsoft Purview?

• AThey display the real-time performance of the organization's network and its servers
• BThey list all of the software licenses that have been assigned to each individual named user
• CThey show where sensitive or labeled content is and what is being done with it✓
• DThey provide a map of the physical layout of the office building

Answer: Content explorer shows where sensitive and labeled items reside, and Activity explorer shows the actions taken on that content, giving visibility for data protection. Neither is a network, licensing or facilities tool.

What do Microsoft's privacy principles describe?

• AThe detailed steps that are required to build and configure a new virtual machine in the Azure portal
• BThe various pricing tiers that are available for each of the different Microsoft 365 subscriptions
• CThe keyboard shortcuts used across Microsoft applications
• DMicrosoft's commitments on how it handles and protects customer data✓

Answer: Microsoft's privacy principles set out its commitments on how it handles and protects customer data, framed as four areas: you control your data, you know where it is located, it is secured at rest and in transit, and Microsoft defends your data. They are not technical, pricing or usability guidance.