Professional Standards & Competencies Flashcards
7 cards from real 70-413 Exam practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Professional Standards & Competencies flashcards as text
When designing a server infrastructure for a regulated healthcare organization, which compliance framework most directly governs how protected health information (PHI) must be secured on Windows servers?
Answer: HIPAA Security Rule
The HIPAA Security Rule mandates administrative, physical, and technical safeguards for electronic PHI on all covered entity systems.
A server infrastructure architect is documenting a design decision. Which artifact best demonstrates professional due diligence by capturing the alternatives considered and the rationale for the chosen approach?
Answer: Architecture Decision Record (ADR)
An Architecture Decision Record (ADR) formally records the context, options evaluated, and justification, demonstrating professional accountability.
During capacity planning for a new Hyper-V cluster, you discover that the proposed design will violate the organization's Acceptable Use Policy regarding shared storage encryption. What is the correct professional action?
Answer: Escalate the conflict to the security team before finalizing the design
Escalating policy conflicts before deployment is the professionally responsible action that protects both the organization and the engineer.
Which principle requires that a Windows Server administrator only be granted the minimum permissions necessary to perform their job function?
Answer: Principle of least privilege
The principle of least privilege limits access rights to only those resources and permissions explicitly required for the job role.
An IT professional learns that a colleague has been sharing domain administrator credentials to avoid the approval process. What is the most appropriate first response?
Answer: Report the behavior through the organization's incident or ethics channel
Reporting through proper channels addresses the security risk and upholds professional ethics without causing unnecessary disruption.
When preparing a disaster recovery design for a 70-413 scenario, which professional standard requires you to document the Maximum Tolerable Downtime (MTD) before selecting a recovery strategy?
Answer: Business Impact Analysis (BIA)
A Business Impact Analysis (BIA) defines MTD and Recovery Time Objectives, which drive all subsequent DR strategy decisions.
A server infrastructure plan is being reviewed by stakeholders who have conflicting requirements. What professional technique best resolves competing priorities while keeping all parties aligned?
Answer: Facilitate a requirements prioritization workshop using MoSCoW or similar method
Structured prioritization techniques like MoSCoW give all stakeholders a voice and produce a documented, agreed-upon priority list.