Regulatory Frameworks & Compliance Flashcards
7 cards from real Administering Windows Server 2012 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Frameworks & Compliance flashcards as text
Fine-grained password policies in Windows Server 2012 that override the domain default policy are stored in which Active Directory object type?
Answer: Password Settings Object (PSO)
Password Settings Objects (PSOs) store fine-grained password and lockout policies that can be applied directly to users or global security groups.
A NIST SP 800-171 compliance requirement mandates multi-factor authentication for privileged accounts. Which Windows Server 2012 feature enables PKI-based smart card MFA?
Answer: Active Directory Certificate Services with smart card logon templates
AD CS can issue smart card logon certificates, enabling PKI-based MFA combining something you have (card) and something you know (PIN).
For HIPAA compliance, which Windows Server 2012 feature automatically classifies files containing sensitive content like SSNs based on file content patterns?
Answer: File Server Resource Manager with Data Classification Infrastructure
FSRM's Data Classification Infrastructure scans file content and applies classification properties, enabling automated policy-driven protection of sensitive data.
Which Windows Server 2012 auditing category records when a user exercises sensitive privileges such as backing up files or loading a device driver?
Answer: Audit Privilege Use
Audit Privilege Use records when sensitive user rights are exercised, helping detect abuse of privileged capabilities for compliance monitoring.
Which Windows Server 2012 role enables federated identity across organizational boundaries so partner staff can access compliance portals without separate accounts?
Answer: Active Directory Federation Services (AD FS)
AD FS enables federated SSO using claims-based identity, allowing partner organizations to authenticate with their own credentials across trust boundaries.
The NIST Cybersecurity Framework 'Protect' function requires limiting system access to authorized hours. Which Windows Server 2012 AD setting enforces time-of-day logon restrictions?
Answer: Logon Hours restriction in Active Directory user properties
Logon Hours in Active Directory user properties restricts when an account can authenticate, limiting access to approved business hours.
Which Windows Server 2012 feature exports Group Policy baselines in SCAP format for use with third-party compliance scanners to automate NIST benchmark assessments?
Answer: Security Compliance Manager (SCM)
Security Compliance Manager can export security baselines in SCAP format, allowing automated compliance scanning against NIST or CIS benchmarks.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- home.pearsonvue.com — Test delivery · verified Nov 2026
- learn.microsoft.com — Retake policy, passing score, score release, renewal, score validity, eligibility · verified Nov 2026