Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium

A global company needs to ensure that all data stored in Azure meets the regulatory requirements of various international standards, such as GDPR and HIPAA. They require a centralized dashboard to track their compliance posture, receive recommendations for improvement, and generate compliance reports. Which Azure service provides these capabilities?

  1. AAzure Security Center
  2. BMicrosoft Purview Compliance Manager
  3. CAzure Advisor
  4. DAzure Policy
Show answer & explanation

Correct answer: B. Microsoft Purview Compliance Manager

Microsoft Purview Compliance Manager helps organizations manage their compliance posture, providing a dashboard to track progress, assign tasks, and generate reports against various regulatory standards like GDPR and HIPAA.

Why the other options are wrong

  • A. Azure Security Center (now Microsoft Defender for Cloud) focuses on security posture management and threat protection, not broad regulatory compliance management.
  • C. Azure Advisor provides recommendations for cost, performance, reliability, operational excellence, and security, but not a comprehensive compliance management solution.
  • D. Azure Policy enforces organizational standards but doesn't provide a centralized dashboard for managing overall compliance posture against external regulations.

Microsoft Purview Compliance Manager

Microsoft Purview Compliance Manager is a feature in the Microsoft Purview compliance portal that helps manage your organization's compliance posture.

  • Provides a compliance score.
  • Offers pre-built templates for various regulations.
  • Assigns tasks and tracks remediation progress.

Memory trick: Compliance Manager Makes Rules Meet.

More Describe Azure management and governance questions