MENU
You are deploying an SAP production landscape to Azure.
Your company's chief information security officer (CISO) requires that the SAP deployment complies with ISO 27001.
You need to generate a compliance report for ISO 27001.
What should you use?
Suggested Answer: A
Get Premium AZ-120 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
In the Azure Security Center regulatory compliance blade, you can get an overview of key portions of your compliance posture with respect to a set of supported standards. Currently supported standards are Azure CIS, PCI DSS 3.2, ISO 27001, and SOC TSP.
13 comments · newest first
DA
Dacia
12 months ago
100% agree, Security Center is built for this!
KA
Kaycee
1 year ago
Wait, can Azure really handle all that compliance stuff?
CH
Christa
1 year ago
Definitely need to check ISO 27001 requirements first.
LY
Lynda
1 year ago
I thought Azure Monitor could do that too?
KI
King
1 year ago
Azure Security Center is the way to go for compliance reports!
ST
Stacey
1 year ago
Azure Monitor seems like it could track metrics, but I don't think it generates compliance reports either. I might lean towards Azure Security Center.
TE
Terrilyn
1 year ago
I feel like Azure Active Directory is more about identity management, so it probably wouldn't generate the compliance report we need.
AU
Audra
1 year ago
I think Azure Log Analytics might help with gathering data, but I don't recall it being directly tied to compliance reporting.
AL
Alva
1 year ago
I remember studying Azure Security Center for compliance reports, but I'm not entirely sure if it's the best choice for ISO 27001 specifically.
EA
Earlean
1 year ago
Wait, I'm a bit confused. Is the "Equipment" category just for mechanical issues, or does it cover any equipment-related problems that could lead to defects? I want to make sure I understand this properly before selecting an answer.
SU
Sunny
1 year ago
Okay, let's see. Cross-site scripting could potentially be used to gain access to a phone's camera and microphone, but that's not really the same as full remote control and surveillance. The other options seem a bit far-fetched. I'm leaning towards B as the best answer, but I'll double-check my understanding.
WI
Willodean
1 year ago
This question seems straightforward, but I want to make sure I understand the Uniform Capitalization Rules before answering.
TI
Timmy
1 year ago
Okay, I think I know the answer to this one. The prerequisites are enabling outbreak filters and antispam scanning. Let me double-check that.