Which Microsoft Portal Documents ISO Compliance for Microsoft Cloud Services?

Why the Answer Is Correct

The Microsoft Service Trust Portal (servicetrust.microsoft.com) is Microsoft's dedicated public site for publishing independent audit reports, certifications, and regulatory documentation about Microsoft cloud services themselves, including ISO/IEC 27001, ISO/IEC 27018, SOC 1/2/3, FedRAMP, and GDPR resources. When the question asks how Microsoft cloud services comply with a regulatory standard such as ISO, the evidence lives on the Service Trust Portal, not inside your own tenant. Because the subject of the sentence is Microsoft's own services, the portal must be the vendor's published trust/compliance library. Therefore option C is the correct answer.

Why the Other Options Are Wrong

The Microsoft 365 admin center (option A) is the operational console for user, license, service health, and billing administration of your tenant — it contains no ISO certification library for Microsoft's cloud services. Azure Cost Management + Billing (option B) is purely a spend-management and invoicing tool and has nothing to do with regulatory standards. The Microsoft Purview compliance portal (option D) is where your organization manages its own compliance posture — Compliance Manager score, DLP policies, eDiscovery, insider risk, and audit — and while it references Microsoft's controls, it is not the source of Microsoft's ISO compliance documentation. Only the Service Trust Portal answers a question phrased around how Microsoft complies.

Community Comment Notes

Every recorded learner pick agrees with option C, and LegendaryZA and MSMN91 both reinforce it by simply posting the URL "https://servicetrust.microsoft.com/", which is the canonical domain for Microsoft's compliance offerings. IT_Security_Team draws the precise boundary the exam is testing, paraphrased here: the Service Trust Portal shows how Microsoft complies with regulations, while the Purview Compliance Portal is where you implement and manage your own organization's compliance settings — the exact distinction that rules out option D. No commenter defended options A or B, which is consistent with how clearly those tools sit outside the compliance-documentation topic.