Practice Test Geeks(CSA) Certified System Administrator Practice Test
← All CSA Flashcard Decks

Regulatory Compliance & Licensing Flashcards

7 cards from real CSA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Regulatory Compliance & Licensing flashcards as text

  1. Which software licensing model grants the user rights to use, study, modify, and distribute the software and its source code freely?

    Answer: Open-source license

    Open-source licenses (e.g., GPL, MIT, Apache) explicitly grant users the four fundamental freedoms including use, study, modification, and redistribution.

  2. An organization running Red Hat Enterprise Linux wants to remain compliant. After adding 10 new servers, the administrator should primarily:

    Answer: Purchase additional subscription entitlements and attach them via Red Hat Subscription Manager

    RHEL uses a subscription model; each system must be registered and attached to a valid subscription entitlement through Red Hat Subscription Manager (RHSM).

  3. Under PCI DSS Requirement 10, what is the minimum log retention period organizations must maintain for audit logs?

    Answer: 12 months

    PCI DSS Requirement 10.7 mandates that audit log history be retained for at least 12 months, with at least 3 months immediately available for analysis.

  4. A company using Microsoft 365 E3 licenses discovers employees are also using Power BI Premium features. What compliance action is required?

    Answer: Upgrade affected users to E5 or purchase standalone Power BI Premium licenses

    Power BI Premium features are not included in Microsoft 365 E3; organizations must license users with E5 or dedicated Power BI Premium per-user licenses.

  5. The California Consumer Privacy Act (CCPA) applies to for-profit businesses that meet which threshold related to personal information?

    Answer: Buy, sell, or share personal information of 100,000 or more consumers or households annually

    Under CCPA (as amended by CPRA), one qualifying threshold is buying, selling, or sharing personal information of 100,000 or more consumers or households per year.

  6. Which NIST framework function focuses on developing and implementing appropriate safeguards to ensure delivery of critical infrastructure services?

    Answer: Protect

    The 'Protect' function in the NIST Cybersecurity Framework covers access control, awareness training, data security, and protective technologies.

  7. An administrator is deploying VMware vSphere. The licensing model charges per physical CPU socket. A server with 2 CPUs and 32 cores total requires how many vSphere licenses?

    Answer: 2

    VMware vSphere licenses are issued per physical CPU socket, so a dual-socket server requires exactly 2 licenses regardless of core count.