70-413 Exam Regulatory Frameworks & Compliance 4

Question 1

A federal agency deploying a cloud-hosted server infrastructure must obtain which authorization before processing government data under FedRAMP?

Accepted Answer

Authority to Operate (ATO)

Answer

FedRAMP requires cloud service providers to obtain an Authority to Operate (ATO) from a federal agency or a JAB Provisional ATO before processing federal data.

Question 2

An organization must restrict which users can install software on servers to comply with CIS Benchmark hardening standards. Which Group Policy setting achieves this most effectively?

Accepted Answer

Configure Software Restriction Policies or AppLocker

Answer

AppLocker (or Software Restriction Policies) allows administrators to define exactly which applications are permitted to run, blocking unauthorized software installation.

Question 3

A company undergoing an ISO 27001 audit must demonstrate a formal risk assessment process. Which Windows Server tool helps quantify risk by showing the effective permissions a user has?

Accepted Answer

Effective Access tab in Advanced Security Settings

Answer

The Effective Access tab in Advanced Security Settings shows the cumulative permissions a specific user or group has on an object, supporting ISO 27001 access rights review requirements.

Question 4

HIPAA requires covered entities to have a contingency plan, including data backup. Which Windows Server role provides automated, policy-driven backup to meet this requirement?

Accepted Answer

Windows Server Backup

Answer

Windows Server Backup provides scheduled, policy-driven backup of server data and system state, fulfilling HIPAA's contingency plan data backup requirement.

Question 5

Under PCI DSS Requirement 1, only authorized traffic may access the cardholder data environment. Which Windows Server feature enforces host-based traffic filtering at the server level?

Accepted Answer

Windows Firewall with Advanced Security (WFAS)

Answer

Windows Firewall with Advanced Security enforces inbound and outbound traffic rules at the host level, controlling which traffic can reach the cardholder data environment.

70-413 Exam Practice Test

70-413 Exam Practice Test

70-413 Exam Regulatory Frameworks & Compliance 4