70-413 Exam Regulatory Frameworks & Compliance 5

Question 1

A company must implement network admission control to ensure only compliant (patched, AV-enabled) machines can access the internal network. Which Windows Server role provides this?

Accepted Answer

Network Access Protection (NAP)

Answer

Network Access Protection evaluates client health against defined policies and restricts or remediates non-compliant machines before granting full network access.

Question 2

Under GDPR, personal data must not be transferred outside the EU without adequate protections. When designing a Windows Server infrastructure with Azure integration, which feature controls data residency?

Accepted Answer

Azure region selection and data residency policies

Answer

Selecting specific Azure regions and applying data residency policies ensures personal data remains within EU boundaries, satisfying GDPR's data transfer restrictions.

Question 3

An auditor requires proof that privileged account usage on domain controllers is monitored. Which audit policy logs when a user exercises a user right such as 'Act as part of the operating system'?

Accepted Answer

Audit Privilege Use

Answer

Audit Privilege Use generates events when a user account exercises a user right, capturing privileged operations for compliance reporting on domain controller activity.

Question 4

CIS Controls require disabling unnecessary services on servers to reduce attack surface. Which Windows Server tool assesses which roles and services are needed and generates a security policy accordingly?

Accepted Answer

Security Configuration Wizard (SCW)

Answer

The Security Configuration Wizard guides administrators through role-based questions and generates a security policy that disables unneeded services and ports.

Question 5

PCI DSS requires that access to system components is assigned an individual ID so each user can be held accountable. What Active Directory practice directly supports this requirement?

Accepted Answer

Assigning individual user accounts and prohibiting shared accounts

Answer

Assigning unique individual accounts to every user ensures accountability and non-repudiation, which is a direct PCI DSS Requirement 8 mandate.

70-413 Exam Practice Test

70-413 Exam Practice Test

70-413 Exam Regulatory Frameworks & Compliance 5