Exam SC-900 topic 1 question 129 discussion

Protect = prevent Monitor = detect

Keywords: Preventative = Protect at rest Detective = Actively monitor https://learn.microsoft.com/en-us/purview/compliance-score-calculation?view=o365-worldwide

1. Preventative 2. Detective https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide#preventative-detective-and-corrective-actions Preventative actions address specific risks. For example, protecting information at rest using encryption is a preventative action against attacks and breaches. Separation of duties is a preventative action to manage conflict of interest and guard against fraud. Detective actions actively monitor systems to identify irregular conditions or behaviors that represent risk, or that can be used to detect intrusions or breaches. Examples include system access auditing and privileged administrative actions. Regulatory compliance audits are a type of detective action used to find process issues.

Correct

Correct