Regulatory Frameworks & Compliance Flashcards

PCI DSS Requirement 3 mandates protection of stored cardholder data. Which Windows Server 2012 feature best satisfies this for local disk storage?

Answer: BitLocker Drive Encryption

BitLocker Drive Encryption encrypts entire volumes, protecting stored cardholder data if a server is physically compromised.

For PCI DSS compliance, which remote access protocol should be DISABLED on Windows Server 2012 because it transmits credentials in cleartext?

Answer: Telnet

Telnet transmits all data including credentials in cleartext and violates PCI DSS Requirement 2.2.7, which mandates encrypted administration.

An administrator deploys Active Directory Rights Management Services (AD RMS) to protect sensitive documents. Which compliance requirement does this primarily address?

Answer: Information rights management and data loss prevention

AD RMS applies persistent usage policies to documents, preventing unauthorized access or redistribution even after files leave the organization.

Which Windows Server 2012 Certificate Services configuration is required to issue S/MIME certificates for encrypted email compliance?

Answer: Active Directory Certificate Services with an Enterprise CA

An Enterprise CA integrated with AD can auto-enroll S/MIME certificates to users from templates, enabling compliant encrypted email.

For FERPA compliance, an educational institution wants file-level access control on student records stored on a Windows Server 2012 file share. Which feature enforces this?

Answer: NTFS permissions and Access Control Lists

NTFS permissions and ACLs control exactly which user accounts and groups can read, write, or modify files containing student records.

When configuring IPsec for PCI DSS network isolation between cardholder data systems on Windows Server 2012, which console is used to create Connection Security Rules?

Answer: Windows Firewall with Advanced Security

Windows Firewall with Advanced Security includes Connection Security Rules that configure IPsec authentication and encryption between hosts.

A compliance audit requires proof that servers are kept current with security patches. Which Windows Server 2012 role provides centralized patch compliance reporting?

Answer: Windows Server Update Services (WSUS)

WSUS provides centralized patch management and compliance reporting showing which computers have or have not installed required updates.