SC-100 Certification Practice Question #111

Question

You have an Azure subscription.

You have a Microsoft 365 subscription.

You need to assess regulatory compliance of the subscriptions. The solution must meet the following requirements:

•	Identify whether data stored in Azure and Microsoft 365 complies with General Data Protection Regulation (GDPR) regulations.
•	Identify whether Azure resources comply with National Institute of Standards and Technology (NIST) standards.
•	Provide recommendations on controls to improve compliance.

What should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

The NIST requirement is scoped to *Azure resources*, which is exactly what Defender for Cloud's Regulatory compliance dashboard assesses — it continuously evaluates Azure resources against built-in standards (including NIST) and recommends controls to improve compliance. The GDPR requirement spans *both Azure and Microsoft 365* with control recommendations, which is Microsoft Purview Compliance Manager's role: prebuilt GDPR assessment templates, a risk-based compliance score, and step-by-step improvement actions across the multicloud/M365 estate. The other dropdown options (Vulnerability Management, Sentinel, Priva, Communication Compliance) do not perform regulatory-standard compliance assessment. The Highly Voted community answers are unanimous across four commenters (24 combined 👍), and MS Learn confirms both tool mappings.

More SC-100 practice questions