70-413 Exam Regulatory Frameworks & Compliance 3

Question 1

A PCI DSS audit requires that all default vendor passwords be changed before production deployment. Which Windows Server feature can enforce password complexity at deployment time?

Accepted Answer

Fine-Grained Password Policies

Answer

Fine-Grained Password Policies (PSOs) allow granular password complexity and length requirements per user or group, ensuring non-default passwords for all service accounts.

Question 2

FISMA requires systems be categorized as Low, Moderate, or High impact. When designing server infrastructure, which document maps these impact levels to specific security controls?

Accepted Answer

NIST SP 800-53

Answer

NIST SP 800-53 provides the catalog of security and privacy controls that correspond to FISMA Low, Moderate, and High impact categorizations.

Question 3

A company must prove to auditors that no single administrator can both approve and implement firewall changes (separation of duties). Which Active Directory feature best enforces this?

Accepted Answer

Role-Based Access Control via delegated OUs

Answer

Delegating specific permissions to separate OUs enforces Role-Based Access Control, ensuring approval and implementation roles are assigned to different administrative groups.

Question 4

Under GDPR, an EU customer's personal data must be deleted upon request. Which Windows Server capability helps locate all instances of that data across file servers?

Accepted Answer

File Classification Infrastructure (FCI)

Answer

File Classification Infrastructure automatically classifies files by content using classification rules, enabling administrators to locate and act on all files containing specific personal data.

Question 5

SOX requires that audit logs cannot be altered by the accounts being audited. Which Windows Server configuration prevents even administrators from deleting security logs?

Accepted Answer

Forward logs to a dedicated write-once log collector with restricted permissions

Answer

Forwarding logs to a centralized server where the audited administrators lack delete permissions ensures log integrity, a core SOX audit trail requirement.

70-413 Exam Practice Test

70-413 Exam Practice Test

70-413 Exam Regulatory Frameworks & Compliance 3