Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Hard
A Microsoft 365 administrator is configuring the tenant to comply with industry regulations that mandate strict logging of all access to customer data. The administrator needs a way to confirm that Microsoft support engineers, if they ever require access to the customer's data for troubleshooting, must obtain explicit approval from the customer before accessing it. Which Microsoft 365 privacy control addresses this specific requirement?
- AData Processing Addendum (DPA)
- BCustomer Lockbox
- CService Trust Portal
- DMicrosoft Priva
Show answer & explanationAnswer & explanation
Correct answer: B. Customer Lockbox
Customer Lockbox for Microsoft 365 gives customers explicit control over whether a Microsoft support engineer can access their content to perform service operations. All access requests must be approved by the customer, ensuring transparency and control over data access by Microsoft personnel.
Why the other options are wrong
- A. A Data Processing Addendum is a contractual agreement that defines Microsoft's obligations as a data processor, but it's not a control mechanism for real-time approval of access requests.
- C. The Service Trust Portal provides publications and resources about Microsoft's security, privacy, and compliance practices, but doesn't offer direct control over support engineer access.
- D. Microsoft Priva helps organizations build resilience for privacy risks, focusing on data subject requests and privacy assessments, not direct control over Microsoft support access.
Customer Lockbox
A Microsoft 365 privacy control that requires explicit customer approval for Microsoft support engineers to access customer content during service operations.
- Provides transparency and control over data access by Microsoft personnel.
- All access requests are logged and auditable.
- Enhances customer trust and helps meet compliance requirements.
Memory trick: Customer Lockbox is like giving Microsoft a key, but only after you've explicitly said 'yes'.