Exam AZ-900 topic 1 question 291 discussion

The answer should be Defender for Cloud. See below MS Doc: https://docs.microsoft.com/en-us/azure/defender-for-cloud/regulatory-compliance-dashboard

Answer is D (Microsoft Service Trust Portal) Microsoft Defender for Cloud is about your Resources (subscription) while Microsoft Service Trust Portal is about general services (Azure). Got this answers after analyzing from the public comments.

The Microsoft service Trust portal https://learn.microsoft.com/en-us/purview/get-started-with-service-trust-portal

I find all these different product names incredibly confusing.

Microsoft Service Trust Portal Got this question on June 30, 2023

"Microsoft Service Trust Portal" is the answer. https://learn.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide#accessing-the-service-trust-portal The Service Trust Portal is Microsoft's public site for publishing audit reports and other compliance-related information associated with Microsoft’s cloud services. STP users can download audit reports produced by external auditors and gain insight from Microsoft-authored whitepapers that provide details on how Microsoft cloud services protect your data, and how you can manage cloud data security and compliance for your organization. To access some of the resources on the Service Trust Portal, you must log in as an authenticated user with your Microsoft cloud services account (Azure Active Directory organization account) and review and accept the Microsoft Non-Disclosure Agreement for Compliance Materials.

• the Microsoft Service Trust Portal (STP) provides audit reports for a variety of Microsoft services, including Azure. The STP is a central location where you can find information about the security, compliance, and privacy of Microsoft's cloud services. It includes a variety of resources, such as: ○ Compliance reports and certifications: ○ Service compliance information: ○ Auditing and reporting:

You can access Azure audit reports and related documentation via the Service Trust Portal (STP). You must sign in to access audit reports on the STP. For more information, see Get started with Microsoft Service Trust Portal https://learn.microsoft.com/en-us/azure/compliance/offerings/#:~:text=You%20can%20access%20Azure%20audit,with%20Microsoft%20Service%20Trust%20Portal.

The Service Trust Portal is Microsoft's public site for publishing audit reports and other compliance-related information associated with Microsoft’s cloud services.

or trust porttal?\ The Service Trust Portal is Microsoft's public site for publishing audit reports and other compliance-related information associated with Microsoft’s cloud services. STP users can download audit reports produced by external auditors and gain insight from Microsoft-authored whitepapers that provide details on how Microsoft cloud services protect your data, and how you can manage cloud data security and compliance for your organization.

defender for cloud: To download Azure and Dynamics certification reports for the standards applied to your subscriptions, use the Audit reports option.

The provided answer Service Trust Portal is correct. This is where SOC is and SOC=Audit

SERVICE TRUST PORTAL (STP) Microsoft publishes audit reports and other compliance related information.

Defender for Cloud. Why don't you update it ?

Defender for Cloud

The question seems to refer to general services, not yours in the cloud. IN that case D makes sense :https://servicetrust.microsoft.com/