Exam objective

SC-900

Describe Microsoft Service Trust Portal and privacy principles

This objective sits in Describe capabilities of Microsoft compliance solutions, which carries 22% of the Security, Compliance, and Identity Fundamentals exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.

Objective title verbatim from the official objectives. Microsoft Azure exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

Describe capabilities of Microsoft compliance solutions

A government agency asks Microsoft directly for a customer's data held in a commercial cloud service. What is Microsoft's stated position on such requests?

Comply if the agency is in the datacenter's countryDatacenter location is a data residency choice; it does not change Microsoft's stance on government requests.
Provide the data, then notify the customerWhere legally permitted Microsoft notifies the customer and directs the requester to them rather than disclosing first.
Hand over metadata but never contentThe unit draws no line between metadata and content; the position applies to customer data as a whole.
Direct the request to the customer, not MicrosoftCorrect · your answerCorrect.

Correct.

Checked against learn.microsoft.com, September 2026

Concept

The privacy principles are about who controls the data; the cloud provider's role in a legal demand is to route it to the owner, not answer it.

Why D

The source says Microsoft's position is that all government requests should be directed to the customer, that it does not give governments direct or unfettered access, and that it challenges requests where it can lawfully do so.

Source

Microsoft's position is that all government requests for your data should be directed to you-not to Microsoft. Microsoft doesn't give any government direct or unfettered access to customer data. If a government or law enforcement agency requests your data, Microsoft won't disclose it except as you direct or where required by law.

Describe Microsoft's privacy principles, checked September 2026
#privacy#government-requests#scenario

Now you: practice questions

No account needed. The explanation opens when you answer.

Sample question 1 of 2

Describe capabilities of Microsoft compliance solutions

An auditor asks for third party audit reports covering Microsoft's cloud services. Where are those published?

Sample question 2 of 2

Describe capabilities of Microsoft compliance solutions

Downloading some Service Trust Portal materials requires more than a sign-in. What is the additional requirement?

Full Security, Compliance, and Identity Fundamentals question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Describe capabilities of Microsoft compliance solutions