Compliance standards (SOC, ISO, GDPR) in Azure - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the compliance standard for Azure Policy assignment.

Azure

az policy assignment create --name 'SecureStorage' --policy 'StorageEncryption' --params '{"complianceStandard": "[1]"}'

Drag options to blanks, or click blank then click option'

ASOC

BISO

CGDPR

DPCI

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing GDPR which is a regulation, not a policy standard.

The ISO standard is commonly specified in Azure Policy parameters for compliance.

2fill in blank

medium

Complete the code to enable Azure Compliance Manager for GDPR.

Azure

az compliance manager assessment create --name 'GDPRAssessment' --standard '[1]'

Drag options to blanks, or click blank then click option'

AISO

BSOC

CGDPR

DHIPAA

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing GDPR with SOC which is a service organization control.

Azure Compliance Manager supports GDPR assessments to help manage data privacy.

3fill in blank

hard

Fix the error in the Azure CLI command to list SOC compliance reports.

Azure

az security compliance list --standard [1]

Drag options to blanks, or click blank then click option'

ASOC

BISO

CGDPR

DNIST

Attempts:

3 left

💡 Hint

Common Mistakes

Using ISO or GDPR which are different compliance standards.

The correct standard to list SOC compliance reports is SOC.

4fill in blank

hard

Fill both blanks to create an Azure Policy definition targeting ISO compliance and enabling auditing.

Azure

az policy definition create --name 'ISOComplianceAudit' --rules '{"if": {"field": "[1]"}, "then": {"effect": "[2]"}}'

Drag options to blanks, or click blank then click option'

AcomplianceStandard

BresourceType

Caudit

Ddeny

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'deny' effect which blocks resources instead of auditing.

The policy targets the complianceStandard field and uses the audit effect to monitor compliance.

5fill in blank

hard

Fill all three blanks to configure an Azure Security Center compliance scan for GDPR with a specific resource group and enable continuous export.

Azure

az security compliance scan create --name 'GDPRScan' --standard [1] --resource-group [2] --export-settings [3]

Drag options to blanks, or click blank then click option'

AGDPR

BMyResourceGroup

Cenabled

Ddisabled

Attempts:

3 left

💡 Hint

Common Mistakes

Disabling export which prevents compliance data sharing.

The scan targets the GDPR standard, runs on MyResourceGroup, and has continuous export enabled.