Hotspot Question Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Question

Exhibit

Answer Area

• The Microsoft Compliance Manager portal can be used to create data loss prevention (DLP) policies.No
• The Microsoft Service Trust portal can be used to provide financial compliance and standards reports.Yes

Explanation

The question assesses knowledge of Microsoft's compliance portals, specifically identifying that DLP policies are managed within the Microsoft Purview compliance portal (where Compliance Manager resides) and that the Service Trust Portal provides compliance reports.

Approach. To correctly answer this question, the test-taker must select 'Yes' for both statements.

1. Statement 1: 'The Microsoft Compliance Manager portal can be used to create data loss prevention (DLP) policies.'

   • Correct Interaction: Select 'Yes'.
   • Reasoning: While Data Loss Prevention (DLP) policies are specifically created under the 'Data loss prevention' section, both Compliance Manager and DLP capabilities are housed within the broader Microsoft Purview compliance portal. In common exam scenarios, 'Microsoft Compliance Manager portal' is often used as a general reference to the Microsoft Purview compliance portal where Compliance Manager is a key feature. Therefore, it is correct to state that DLP policies can be created from this portal.

2. Statement 2: 'The Microsoft Service Trust portal can be used to provide financial compliance and standards reports.'

   • Correct Interaction: Select 'Yes'.
   • Reasoning: The Microsoft Service Trust Portal (STP) is a dedicated resource for customers to access information about Microsoft's security, privacy, and compliance practices. This includes a wide array of audit reports (e.g., SOC, ISO, FedRAMP, HIPAA, PCI DSS), compliance guides, and trust documents that directly relate to financial compliance and various industry standards.

Common mistakes.

• common_mistake. Common mistakes include confusing the specific feature 'Compliance Manager' with the overarching 'Microsoft Purview compliance portal,' leading to an incorrect 'No' for the first statement. Another mistake is misunderstanding the core purpose of the Microsoft Service Trust Portal, which is precisely to provide compliance reports and documentation, thus incorrectly selecting 'No' for the second statement. Choosing 'No' for either statement demonstrates a lack of understanding of the distinct functions and content offered by these critical Microsoft compliance resources.

Concept tested. This question tests the candidate's knowledge of Microsoft 365/Azure compliance services, specifically:

• The functionalities and scope of the Microsoft Purview compliance portal, including where Data Loss Prevention (DLP) policies are managed and how Compliance Manager fits into this ecosystem.
• The distinct purpose and available content (e.g., audit reports, compliance guides) of the Microsoft Service Trust Portal.

Reference. https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-manager https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about https://www.microsoft.com/en-us/servicetrust/

No community discussion yet for this question.