nerdexam
Microsoft

SC-100 · Question #142

You are a security engineer tasked with finding a solution that would help improve personal data protection for the organization. The Chief Information Officer Has identified three areas that this sol

The correct answer is C. Privacy Risk Management in Microsoft Priva. Privacy Risk Management in Microsoft Priva (C) is purpose-built to address all three requirements stated by the CIO. It identifies overexposed personal data by scanning for sensitive data shared too broadly within the organization. It detects personal data being transferred acros

Design security operations, identity, and compliance capabilities

Question

You are a security engineer tasked with finding a solution that would help improve personal data protection for the organization. The Chief Information Officer Has identified three areas that this solution should address

  • Identifying overexposed personal data
  • Identify personal data that is being transferred across regions
  • Provide users with feedback to reduce the amount of unused data Store

Options

  • AMicrosoft Viva Insights
  • BMicrosoft defender for cloud
  • CPrivacy Risk Management in Microsoft Priva
  • DMicrosoft Purview eDiscovery

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    11% (3)
  • C
    81% (22)
  • D
    4% (1)

Explanation

Privacy Risk Management in Microsoft Priva (C) is purpose-built to address all three requirements stated by the CIO. It identifies overexposed personal data by scanning for sensitive data shared too broadly within the organization. It detects personal data being transferred across geographic regions (data transfer policies). It also sends in-product notifications directly to users to help them remediate unused or over-shared personal data, providing the feedback loop described in the third requirement. Microsoft Viva Insights (A) focuses on workforce productivity and wellbeing analytics. Defender for Cloud (B) addresses cloud infrastructure security posture. Microsoft Purview eDiscovery (D) is for legal hold and litigation discovery, not proactive privacy risk management.

Topics

#Privacy Risk Management#Data Protection#Microsoft Priva#Data Exposure

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice