Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Purview Compliance Manager Templates, Actions and Scoring
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An enterprise wants to evaluate its adherence to industry and regional data protection regulations, such as GDPR and NIST CSF, across its multicloud environment.
The compliance team needs a solution that provides ready-to-use regulatory assessment templates, tracks recommended improvement actions, and calculates an overall compliance score to ensure audit readiness.
Which feature in Microsoft Purview should the enterprise use?
Explanations
Azure Resource Locks
Azure Resource Locks
What Azure Resource Locks Are
Azure Resource Locks are management mechanisms applied at the subscription, resource group, or resource level to prevent accidental modification or deletion of critical Azure cloud infrastructure.
Why It Doesn't Meet the Requirement
Resource locks only provide infrastructure protection (using ReadOnly or CanNotDelete flags). They cannot analyze data contents, assess compliance against standards like NIST or GDPR, or provide improvement actions.
Key Characteristics and Limitations
- Targeted at infrastructure resources: Applies directly to Azure Resource Manager entities rather than business data or multicloud compliance frameworks.
- Binary enforcement: Only restricts modification and deletion activities.
- No assessment capabilities: Does not generate audit reports, compliance scores, or regulatory mappings.
This Answer Would Be Correct If
The scenario required preventing accidental deletion of a production database or a central Purview governance account in Azure.
Microsoft Purview Data Policy Enforcement
Microsoft Purview Data Policy Enforcement
What Microsoft Purview Data Policy Enforcement Is
Microsoft Purview Data Policy Enforcement is a governance capability that allows policy authors to manage access permissions directly on registered data sources (such as Azure SQL Database or Azure Storage) from a centralized console.
Why It Doesn't Meet the Requirement
Data policy enforcement governs and provisions direct data plane access for users and applications. It does not measure organizational adherence to global compliance standards or provide regulatory assessment templates.
Key Characteristics and Limitations
- Focuses on access control: Authorizes read/write permissions at the data source level.
- Requires source registration: Operates on specific registered data repositories within the Purview Data Map.
- Lacks compliance assessment features: Does not evaluate procedural controls, calculate a compliance score, or offer pre-built regulatory templates.
This Answer Would Be Correct If
The requirement was to centrally grant and enforce granular access control policies across cloud storage accounts without configuring each resource individually.
Microsoft Purview Data Loss Prevention
Microsoft Purview Data Loss Prevention
What Microsoft Purview Data Loss Prevention Is
Microsoft Purview Data Loss Prevention (DLP) is a data security capability designed to detect and prevent the unauthorized sharing, transfer, or leakage of sensitive information (such as financial records or personally identifiable information).
Why It Doesn't Meet the Requirement
While DLP is essential for enforcing data security policies on endpoints, cloud apps, and emails, it does not provide comprehensive regulatory assessment frameworks, risk-reduction scores, or end-to-end regulatory templates like GDPR or NIST audit checklists.
Key Characteristics and Limitations
- Focuses on operational security: Inspects content and restricts actions such as copying, emailing, or uploading sensitive files.
- Rule-based enforcement: Relies on specific condition-action rules rather than broad governance assessments.
- No overall compliance scoring: Does not aggregate regulatory control testing across organizational business processes.
This Answer Would Be Correct If
The organization needed to automatically block employees from sending sensitive credit card data or healthcare records via unencrypted external emails.
Microsoft Purview Compliance Manager
Microsoft Purview Compliance Manager
What Microsoft Purview Compliance Manager Is
Microsoft Purview Compliance Manager is an end-to-end compliance management tool within the Microsoft Purview portal. It assists organizations in automatically assessing, tracking, and managing their regulatory compliance posture across multicloud environments and SaaS platforms.
How It Meets the Requirements
- Regulatory Assessment Templates: Compliance Manager includes pre-built templates covering hundreds of global, regional, and industry-specific regulations (such as GDPR, ISO/IEC 27001, and NIST CSF).
- Improvement Actions: It translates complex regulatory controls into straightforward, step-by-step improvement actions assigned to specific team members to remediate compliance risks.
- Risk Scoring & Audit Readiness: It calculates a dynamic compliance score based on implemented controls (both customer-managed and Microsoft-managed), providing auditable evidence and clear documentation for regulatory review.
Key Advantages
- Comprehensive baseline: Provides a default Data Protection Baseline to establish an initial risk posture without complex setup.
- Multicloud assessment: Evaluates controls spanning across Microsoft 365, Microsoft Azure, and third-party clouds.
- Control mapping: Maps single technical actions to multiple compliance standards simultaneously, reducing administrative overhead.
- Role-based governance: Supports granular role-based access control (RBAC) to restrict assessment visibility to authorized auditors and administrators.
Why This Is Optimal
Compliance Manager is uniquely built to track regulatory obligations, provide actionable remediation workflows, and demonstrate overall compliance readiness through measurable metrics, making it the ideal solution.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Microsoft Purview Data Governance
Describe the purpose of Microsoft Purview in Azure
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Microsoft Purview Data Governance
Describe the purpose of Microsoft Purview in Azure
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Microsoft Purview Data Lineage
Describe the purpose of Microsoft Purview in Azure
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Locally Redundant Storage
Describe redundancy options
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Advisor Cost Optimization
Describe the purpose of Azure Advisor
ExpertAZ-500 Microsoft Azure Security Technologies Exam
Application Permissions vs Delegated Permissions
Configure app registration permission scopes
Last updated Validated