Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityMedium
A company is implementing a new compliance framework. They need to ensure that all changes to critical system configurations are recorded, including who made the change, when it was made, and what exactly was changed. This is crucial for accountability and forensic analysis. Which compliance-related concept is being addressed?
- AeDiscovery
- BData Loss Prevention (DLP)
- CInformation Protection
- DAuditing (Accountability)
Show answer & explanationAnswer & explanation
Correct answer: D. Auditing (Accountability)
Auditing, specifically for accountability, involves recording actions and changes to establish who did what, when, and where. This is vital for forensic analysis and ensuring compliance.
Why the other options are wrong
- A. eDiscovery is the process of finding and collecting electronic data for legal proceedings.
- B. DLP focuses on preventing sensitive data from leaving the organization's control.
- C. Information Protection involves classifying and encrypting sensitive data, not primarily logging changes for accountability.
Auditing (Accountability)
The process of systematically examining records and activities to ensure compliance with policies and to establish who performed specific actions.
- Provides a trail of actions for forensic analysis.
- Crucial for demonstrating compliance.
- Records 'who, what, when, and where' of events.
Memory trick: Auditing tracks actions for accountability.