70-413 Exam Regulatory Frameworks & Compliance 2 — Questions and Answers
Question 1: A healthcare organization must ensure that PHI stored on laptops is protected if a device is lost or stolen. Which Windows Server feature best satisfies this HIPAA requirement?
- Windows Defender Firewall
- BitLocker Drive Encryption (Correct answer)
- AppLocker
- Windows Resource Protection
Correct answer: BitLocker Drive Encryption
BitLocker Drive Encryption protects data at rest by encrypting entire volumes, satisfying HIPAA's requirement to safeguard PHI on portable devices.
Question 2: Under PCI DSS, cardholder data must be encrypted in transit. Which Windows Server role provides certificate-based encryption to meet this requirement?
- Active Directory Lightweight Directory Services
- Active Directory Certificate Services (Correct answer)
- Windows Deployment Services
- Remote Desktop Services
Correct answer: Active Directory Certificate Services
Active Directory Certificate Services (AD CS) issues digital certificates that enable TLS/SSL encryption for data in transit, satisfying PCI DSS transport encryption requirements.
Question 3: A SOX audit requires that changes to financial application servers be logged with before-and-after values. Which auditing subcategory should be enabled?
- Audit Logon Events
- Audit Account Management
- Audit Object Access (Correct answer)
- Audit Policy Change
Correct answer: Audit Object Access
Audit Object Access tracks reads, writes, and modifications to files and registry keys, capturing before-and-after change details required for SOX compliance.
Question 4: An organization subject to FISMA must implement continuous monitoring. Which Windows Server component provides real-time security event collection across multiple servers?
- Windows Event Collector (WEF) (Correct answer)
- Performance Monitor
- System Center Data Protection Manager
- Windows Internal Database
Correct answer: Windows Event Collector (WEF)
Windows Event Forwarding (WEF) aggregates security events from multiple servers to a central collector, enabling the continuous monitoring required by FISMA.
Question 5: PCI DSS Requirement 6 mandates that systems are protected against known vulnerabilities. Which Windows Server feature automates patch deployment to meet this requirement?
- Windows Server Update Services (WSUS) (Correct answer)
- File and Storage Services
- Network Policy Server
- Remote Access role
Correct answer: Windows Server Update Services (WSUS)
WSUS centralizes and automates the deployment of Microsoft patches and updates, directly addressing PCI DSS Requirement 6 for vulnerability management.
Question 6: A legal firm must ensure that confidential documents cannot be printed or forwarded outside the organization. Which technology enforces these information rights?
- EFS (Encrypting File System)
- Active Directory Rights Management Services (AD RMS) (Correct answer)
- BitLocker To Go
- Storage Spaces
Correct answer: Active Directory Rights Management Services (AD RMS)
AD RMS applies persistent usage policies to documents that travel with the file, preventing unauthorized printing, forwarding, or copying regardless of location.
Question 7: Under HIPAA's Security Rule, an organization must implement access controls so users only access the minimum necessary PHI. Which Group Policy setting enforces this principle on shared file servers?
- Software Restriction Policies
- NTFS permissions combined with Access-Based Enumeration (Correct answer)
- AppLocker rules
- Windows Firewall inbound rules
Correct answer: NTFS permissions combined with Access-Based Enumeration
NTFS permissions restrict access to only authorized users, and Access-Based Enumeration hides folders the user cannot access, implementing least-privilege access to PHI.
70-413 Exam Regulatory Frameworks & Compliance 2
A healthcare organization must ensure that PHI stored on laptops is protected if a device is lost or stolen.
Which Windows Server feature best satisfies this HIPAA requirement?