Microsoft AZ-120 Exam - Topic 3 Question 41 Discussion

Actual exam question for Microsoft's AZ-120 exam

Question #: 41
Topic #: 3

[All AZ-120 Questions]

You are deploying an SAP production landscape to Azure.

Your company's chief information security officer (CISO) requires that the SAP deployment complies with ISO 27001.

You need to generate a compliance report for ISO 27001.

What should you use?

AAzure Security Center

BAzure Log Analytics

CAzure Active Directory (Azure AD)

DAzure Monitor

Show Suggested Answer

Suggested Answer: A

In the Azure Security Center regulatory compliance blade, you can get an overview of key portions of your compliance posture with respect to a set of supported standards. Currently supported standards are Azure CIS, PCI DSS 3.2, ISO 27001, and SOC TSP.

https://azure.microsoft.com/en-us/blog/regulatory-compliance-dashboard-in-azure-security-center-now-available/

by Harrison at May 09, 2022, 12:31 AM

Limited Time Offer

25%

Off

Get Premium AZ-120 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dacia

4 months ago

100% agree, Security Center is built for this!

upvoted 0 times

...

Kaycee

4 months ago

Wait, can Azure really handle all that compliance stuff?

upvoted 0 times

...

Christa

4 months ago

Definitely need to check ISO 27001 requirements first.

upvoted 0 times

...

Lynda

5 months ago

I thought Azure Monitor could do that too?

upvoted 0 times

...

King

5 months ago

Azure Security Center is the way to go for compliance reports!

upvoted 0 times

...

Stacey

5 months ago

Azure Monitor seems like it could track metrics, but I don't think it generates compliance reports either. I might lean towards Azure Security Center.

upvoted 0 times

...

Terrilyn

5 months ago

I feel like Azure Active Directory is more about identity management, so it probably wouldn't generate the compliance report we need.

upvoted 0 times

...

Audra

5 months ago

I think Azure Log Analytics might help with gathering data, but I don't recall it being directly tied to compliance reporting.

upvoted 0 times

...

Alva

5 months ago

I remember studying Azure Security Center for compliance reports, but I'm not entirely sure if it's the best choice for ISO 27001 specifically.

upvoted 0 times

...

Earlean

5 months ago

Wait, I'm a bit confused. Is the "Equipment" category just for mechanical issues, or does it cover any equipment-related problems that could lead to defects? I want to make sure I understand this properly before selecting an answer.

upvoted 0 times

...

Sunny

5 months ago

Okay, let's see. Cross-site scripting could potentially be used to gain access to a phone's camera and microphone, but that's not really the same as full remote control and surveillance. The other options seem a bit far-fetched. I'm leaning towards B as the best answer, but I'll double-check my understanding.

upvoted 0 times

...

Willodean

5 months ago

This question seems straightforward, but I want to make sure I understand the Uniform Capitalization Rules before answering.

upvoted 0 times

...

Timmy

5 months ago

Okay, I think I know the answer to this one. The prerequisites are enabling outbreak filters and antispam scanning. Let me double-check that.

upvoted 0 times

...