Course 3 –  Microsoft Azure Services and Lifecycles

Module 3: Privacy, Compliance & Data Protection Standards on Microsoft Azure

MICROSOFT AZURE FUNDAMENTALS AZ-900 EXAM PREP SPECIALIZATION

Complete Coursera Study Guide

Last updated:

INTRODUCTION – Privacy, Compliance & Data Protection Standards on Microsoft Azure

In this module, you will explore Microsoft’s strong commitment to privacy and gain an understanding of how Microsoft Azure aligns with common regulatory and compliance standards. This includes detailed insights into the measures and practices that ensure data protection and privacy across its services. By delving into the specific standards that Azure adheres to, you’ll learn how Microsoft consistently prioritizes user privacy and complies with various regulatory frameworks, ensuring a secure and trustworthy environment for its users.

Learning Objectives

  • Explain Azure capabilities that are specific to government agencies.
  • Gain insight into regulatory standards and compliance on Azure from the Trust Center and from the Azure compliance documentation.
  • Access the Microsoft Privacy Statement, the Online Services Terms, and the Data Protection Addendum to learn what personal data Microsoft collects, how Microsoft uses it, and for what purposes.
  • Explain the types of compliance offerings that are available on Azure.

KNOWLEDGE CHECK

1. Which of the following is a legal agreement between Microsoft and the customer that details the obligations by both parties with respect to the processing and security of customer data and personal data?

  • Online Services Terms (CORRECT)
  • Microsoft Privacy Statement

Correct: The Online Services Terms (OST) is a legal agreement between Microsoft and the customer that details the obligations by both parties with respect to the processing and security of customer data and personal data. The OST applies specifically to Microsoft’s online services that you license through a subscription including Azure, Dynamics 365, Office 365, and Bing Maps.

2. Which of the following provides in-depth information about security, privacy, compliance offerings, policies, features, and practices across Microsoft cloud products?

  • Microsoft Trust Center (CORRECT)
  • Azure Portal
  • Azure Monitor
  • Azure Advisor

Correct: The Trust Center provides In-depth information about security, privacy, compliance offerings, policies, features, and practices across Microsoft cloud products including links to the security, privacy, and compliance blogs.

3. True or False?

To provide the highest level of security and compliance, Azure Government uses physically isolated datacenters and networks located only in the US.

  • True (CORRECT)
  • False

Correct: To provide the highest level of security and compliance, Azure Government uses physically isolated datacenters and networks located only in the US. Azure Government customers, such as the US federal, state, and local government or their partners, are subject to validation of eligibility.

4. True or False?

Azure China is operated by 21Vianet and is a physically separated instance of cloud services located in China.

  • True (CORRECT)
  • False

Correct: Azure China is operated by 21Vianet is a physically separated instance of cloud services located in China. It is independently operated and transacted by Shanghai Blue Cloud Technology Co., Ltd. (“21Vianet”), a wholly owned subsidiary of Beijing 21Vianet Broadband Data Center Co., Ltd.

5. Where can the team access details about the personal data Microsoft processes and how the company processes it, including for Cortana?

  • The Azure compliance documentation
  • Microsoft Privacy Statement (CORRECT)
  • Microsoft compliance offerings

Correct: The Microsoft Privacy Statement provides information that’s relevant to specific services, including Cortana.

TEST PREP

1. Which of the following is a legal agreement between Microsoft and the customer that details the obligations by both parties with respect to the processing and security of customer data and personal data?

  • Microsoft Privacy Statement
  • Online Services Terms (CORRECT)

Correct: The Online Services Terms (OST) is a legal agreement between Microsoft and the customer that details the obligations by both parties with respect to the processing and security of customer data and personal data. The OST applies specifically to Microsoft’s online services that you license through a subscription including Azure, Dynamics 365, Office 365, and Bing Maps.

2. In your opinion is the following statement Correct or Incorrect.

Select Yes if you believe it is Correct or No if you believe it is incorrect.

The US Government has access to datacenters and networks that are physically isolated from the standard Azure Cloud Services provided by Microsoft.

  • Yes (CORRECT)
  • No

Correct: To provide the highest level of security and compliance, Azure Government uses physically isolated datacenters and networks located only in the US. Azure Government customers, such as the US federal, state, and local government or their partners, are subject to validation of eligibility.

3. Which of the following provides the ability for analyses of configurations and usage telemetry and offers personalized, actionable recommendations?

  • Microsoft Trust Center 
  • Azure Monitor
  • Azure Advisor (CORRECT)
  • Azure Portal

Correct: Azure Advisor analyses configurations and usage telemetry and offers personalized, actionable recommendations to help you optimize your Azure resources for reliability, security, operational excellence, performance, and cost.

4. Which of the following explains what personal data Microsoft collects, how it is used by them and for what purposes?

  • Microsoft Privacy Statement (CORRECT)
  • Online Services Terms 

Correct: The Microsoft Privacy Agreement explains what personal data Microsoft collects, how Microsoft uses it, and for what purposes.

5. True or false?

The Online Services Terms  (OST) is a legal agreement between Microsoft and the customer.

  • True (CORRECT)
  • False

Correct: The Online Services Terms  (OST) is a legal agreement between Microsoft and the customer. 

6. Which of the following statements best describes Azure Government?

  • Azure Government is an integrated instance of the Microsoft Azure service.
  • Azure Government is a Microsoft Azure service used by the public.
  • Azure Government is a separate instance of the Microsoft Azure service. (CORRECT)
  • Azure Government is a Microsoft Azure service with an extra layer of security.

Correct: Azure Government is a separate instance of the Microsoft Azure service. 

CONCLUSION – Privacy, Compliance & Data Protection Standards on Microsoft Azure

In conclusion, this module highlights Microsoft’s dedication to privacy and demonstrates how Microsoft Azure upholds common regulatory and compliance standards. By prioritizing data protection and adhering to various frameworks, Microsoft ensures a secure and reliable environment for its users, reinforcing trust and compliance in its services.