Regulatory Frameworks & Compliance Flashcards

Under HIPAA, which Windows Server 2012 feature maintains an audit trail of who accessed files containing Protected Health Information (PHI)?

Answer: Object Access Auditing via Group Policy

Object Access Auditing in Group Policy records access to files and folders containing PHI, satisfying HIPAA audit control requirements.

A compliance officer requires that all failed logon attempts be recorded centrally from multiple servers. Which Windows Server 2012 feature best fulfills this?

Answer: Windows Event Forwarding (WEF)

Windows Event Forwarding collects security events from multiple servers to a central collector, enabling centralized failed logon monitoring.

SOX compliance requires that no single user can both create and approve financial transactions. This control principle is called:

Answer: Separation of duties

Separation of duties prevents a single individual from having enough access to commit and conceal fraud, a core SOX control requirement.

Which Windows Server 2012 feature applies file access policies dynamically based on user department and data classification attributes for regulatory compliance?

Answer: Dynamic Access Control (DAC)

Dynamic Access Control uses claims-based policies that automatically enforce access based on user attributes and resource classification.

A healthcare organization must encrypt data at rest on Windows Server 2012 file servers to comply with HIPAA. Which tool is most appropriate?

Answer: BitLocker Drive Encryption

BitLocker Drive Encryption protects data at rest on server volumes, satisfying HIPAA requirements for encryption of stored PHI.

Which Windows Server 2012 auditing subcategory tracks changes made to Active Directory objects and their attributes for compliance purposes?

Answer: Audit Directory Service Changes

Audit Directory Service Changes records modifications to AD objects and attributes, providing a compliance audit trail for directory changes.

For compliance with NIST SP 800-53, an administrator must enforce an account lockout after five failed logon attempts. Where is this configured in Windows Server 2012?

Answer: Account Lockout Policy under Account Policies in Group Policy

Account Lockout Policy under Account Policies in Group Policy sets the lockout threshold, duration, and reset counter for domain accounts.