Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceHard
A global e-commerce company uses Azure to host its customer-facing applications. Due to the sensitive nature of customer payment information, they must adhere to PCI DSS (Payment Card Industry Data Security Standard). They need to demonstrate compliance to auditors. Which Azure feature provides a dashboard-like view of their current compliance posture against various regulatory standards, including PCI DSS, and offers actionable recommendations?
- AMicrosoft Purview Compliance Manager
- BAzure Security Center (Microsoft Defender for Cloud)
- CAzure Advisor
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Purview Compliance Manager
Microsoft Purview Compliance Manager (often referred to as Azure Compliance Manager) is specifically designed to help organizations manage their compliance posture against various regulatory standards like PCI DSS. It provides a centralized dashboard, tracks progress, and offers improvement actions to meet compliance requirements. While other services contribute to compliance, Compliance Manager provides the aggregated view and management workflow.
Why the other options are wrong
- B. Azure Security Center (now Microsoft Defender for Cloud) focuses on security posture management and threat protection, offering regulatory compliance dashboards as part of its security recommendations, but Purview Compliance Manager is the more comprehensive and dedicated solution for managing the full lifecycle of compliance with standards like PCI DSS.
- C. Azure Advisor provides recommendations for optimizing costs, performance, reliability, operational excellence, and security, but not a dedicated compliance management dashboard for specific regulations.
- D. Azure Policy enforces standards and assesses compliance of resources with defined rules, but it doesn't provide a dashboard for managing diverse regulatory frameworks like PCI DSS at an organizational level.
Microsoft Purview Compliance Manager
A unified solution within Microsoft Purview to help manage an organization's end-to-end compliance journey, providing a dashboard for regulatory adherence and actionable steps.
- Centralized compliance dashboard.
- Supports various regulatory standards (e.g., PCI DSS, GDPR, HIPAA).
- Provides improvement actions and score tracking.
Memory trick: Compliance Manager Scores Your Standards.