ACT Industry Regulations & Compliance 2

Question 1

Under FERPA, which entity has primary responsibility for protecting student education records at a K-12 school using Apple devices?

Accepted Answer

The educational institution

Answer

FERPA places responsibility on the educational institution to safeguard student education records, regardless of the technology platform used.

Question 2

An Apple Certified Trainer is deploying iPads in a healthcare clinic. Which regulation primarily governs the protection of patient health information on those devices?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) governs the protection of protected health information (PHI) in US healthcare settings.

Question 3

A trainer is setting up Apple School Manager for a district. Which MDM configuration helps enforce CIPA compliance for student internet access?

Accepted Answer

Configuring content filtering restrictions via MDM profile

Answer

CIPA requires schools to implement internet filtering, which can be enforced through MDM content restriction profiles in Apple School Manager.

Question 4

Which Apple platform feature allows an organization to enforce a passcode policy to meet SOC 2 compliance requirements?

Accepted Answer

MDM configuration profile with passcode payload

Answer

MDM configuration profiles with a passcode payload enforce minimum passcode length, complexity, and expiration across managed devices to satisfy SOC 2 controls.

Question 5

When deploying Macs in a US federal agency, which security framework do Apple devices need to align with for government use?

Accepted Answer

NIST SP 800-53 / FedRAMP

Answer

US federal agencies use NIST SP 800-53 controls and FedRAMP authorization as the standard security framework for IT systems including Apple devices.

ACT Practice Test

ACT Practice Test

ACT Industry Regulations & Compliance 2