Answer-first summary for fast verification
Answer: Utilize Microsoft Priva to discover and catalog all personal data of EU citizens stored across the organization's environments, enforce strict access controls, and ensure only authorized personnel can access the data, thereby demonstrating compliance with the ePrivacy Directive.
Option C is the most comprehensive and appropriate solution for ensuring compliance with the ePrivacy Directive using Microsoft Priva. It addresses the critical requirements of data discovery, access control, and monitoring, which are essential for demonstrating compliance. While options A, B, and D contribute to security and compliance, they do not fully encompass the specific requirements of the ePrivacy Directive as comprehensively as option C. Option C ensures that all personal data is accounted for, access is strictly controlled, and compliance can be demonstrated, making it the best choice for the organization's needs.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
As a Microsoft Cybersecurity Architect, you are tasked with designing a solution for a financial services organization that processes personal data of European Union (EU) citizens. The organization must comply with the EU's ePrivacy Directive, which requires strict handling and protection of personal data. The solution must ensure compliance by addressing data discovery, access control, and monitoring to prevent unauthorized access or disclosure. Additionally, the solution should be scalable to accommodate future growth and must not incur unnecessary costs. Considering these requirements, which of the following approaches using Microsoft Priva would BEST ensure compliance with the ePrivacy Directive? (Choose one option)
A
Implement Microsoft Priva to automatically classify and label personal data of EU citizens, and apply encryption to all data at rest and in transit to meet compliance requirements.
B
Configure Microsoft Priva to continuously monitor data access and usage patterns across cloud and on-premises environments, and automate the generation of compliance reports for auditing purposes.
C
Utilize Microsoft Priva to discover and catalog all personal data of EU citizens stored across the organization's environments, enforce strict access controls, and ensure only authorized personnel can access the data, thereby demonstrating compliance with the ePrivacy Directive.
D
Deploy Microsoft Priva to conduct regular security assessments and penetration tests on systems storing personal data of EU citizens, identifying vulnerabilities that could lead to data breaches and ensuring timely remediation.
No comments yet.