Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A global e-commerce company uses Azure to host its customer-facing applications. Due to the sensitive nature of customer data and various international regulations, they need a centralized way to manage and report on their compliance posture across all Azure services. Which Azure service is designed to help with this requirement?
- AAzure Security Center
- BAzure Monitor
- CMicrosoft Purview Compliance Manager
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Purview Compliance Manager
Microsoft Purview Compliance Manager is a workflow-based solution in the Microsoft Purview compliance portal that helps manage your organization's compliance posture. It provides a centralized dashboard to track compliance activities, assess risks, and generate reports against various regulations, directly addressing the company's need.
Why the other options are wrong
- A. Azure Security Center (now part of Microsoft Defender for Cloud) provides unified security management and threat protection but is not primarily focused on managing and reporting compliance against regulations.
- B. Azure Monitor collects and analyzes telemetry data from Azure resources but is not designed for managing regulatory compliance postures.
- D. Azure Policy enforces rules on Azure resources, contributing to compliance, but Purview Compliance Manager offers the broader management and reporting framework for an overall compliance posture.
Microsoft Purview Compliance Manager
A feature within Microsoft Purview that helps organizations manage their end-to-end compliance journey. It tracks progress, provides recommendations, and generates reports against various regulatory standards.
- Centralized dashboard for compliance.
- Maps to various industry regulations.
- Provides actionable recommendations and risk assessment.
Memory trick: Comply with all the rules, manage it centrally, report the status.