Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft compliance solutionsEasy
A compliance officer needs to provide evidence to an auditor about Microsoft's security practices, compliance certifications, and privacy commitments for the cloud services their organization uses. They require access to official audit reports, whitepapers, and FAQs. Which portal should the compliance officer access?
- AMicrosoft Azure portal
- BMicrosoft 365 admin center
- CMicrosoft Service Trust Portal
- DMicrosoft Purview compliance portal
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Service Trust Portal
The Microsoft Service Trust Portal provides public access to Microsoft's compliance offerings, including audit reports, whitepapers, and FAQs, demonstrating their security, privacy, and compliance practices.
Why the other options are wrong
- A. The Microsoft Azure portal is for managing Azure resources and services, not for accessing Microsoft's global compliance documentation.
- B. The Microsoft 365 admin center is for managing Microsoft 365 services, users, and licenses, not for providing compliance documentation about Microsoft's services.
- D. The Microsoft Purview compliance portal is for managing an organization's own compliance posture within Microsoft services, not for accessing Microsoft's compliance documentation.
Service Trust Portal
A public portal that provides information, tools, and resources about Microsoft's security, privacy, and compliance practices for its cloud services.
- Access to audit reports and certifications
- Includes whitepapers and FAQs on compliance
- Demonstrates Microsoft's commitment to security and privacy
Memory trick: Trust the portal for Microsoft's compliance proof.