Ultimate access to all questions.
As a Microsoft Cybersecurity Architect, you are tasked with designing a solution for a healthcare organization that must comply with the Health Insurance Portability and Accountability Act (HIPAA). The organization processes sensitive patient data across both cloud and on-premises environments. Your solution must ensure compliance with HIPAA's privacy and security rules, focusing on data discovery, access control, and demonstrating compliance through reporting. Considering cost, scalability, and the need for a comprehensive approach to compliance, which of the following strategies using Microsoft Priva would BEST meet these requirements? (Choose one option)
A
Implement Microsoft Priva to create data loss prevention policies aimed at preventing unauthorized access or disclosure of sensitive patient data, without focusing on data discovery or inventory.
B
Utilize Microsoft Priva to monitor data access and usage patterns, generating compliance reports, but without implementing comprehensive access controls or data discovery.
C
Deploy Microsoft Priva to discover and inventory all sensitive patient data across cloud and on-premises environments, implement strict access controls, and ensure only authorized personnel can access the data, thereby demonstrating compliance with HIPAA's privacy and security rules.
D
Use Microsoft Priva exclusively for conducting vulnerability assessments and penetration testing to identify security vulnerabilities, neglecting data discovery and access control measures.