Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft compliance solutionsMedium
A compliance officer at a financial institution needs to demonstrate to auditors that the organization adheres to strict regulatory requirements regarding data residency and data handling. They want to access official documentation and certifications from Microsoft that validate Microsoft 365's compliance posture. Which Microsoft Purview feature or portal provides this information?
- AAudit Log Search
- BService Trust Portal
- CCompliance Manager
- DCommunication Compliance
Show answer & explanationAnswer & explanation
Correct answer: B. Service Trust Portal
The Service Trust Portal provides access to Microsoft's audit reports, compliance guides, and certifications, which are crucial for demonstrating adherence to regulatory requirements and understanding data handling practices.
Why the other options are wrong
- A. Audit Log Search allows for searching user and admin activities within the organization, not Microsoft's compliance documentation.
- C. Compliance Manager helps organizations manage and improve their compliance posture, but it doesn't host Microsoft's raw audit reports or certifications.
- D. Communication Compliance helps detect and remediate inappropriate communications within the organization, unrelated to Microsoft's compliance certifications.
Service Trust Portal
A public portal that provides access to Microsoft's compliance, trust, and security information, including audit reports, compliance guides, and certifications.
- Primary source for Microsoft's compliance documentation.
- Includes audit reports (e.g., SOC, ISO).
- Helps customers understand Microsoft's security and privacy practices.
Memory trick: Trust the Service for official papers.