CSA Regulatory Compliance & Licensing 2

Question 1

Under HIPAA, what is the maximum civil monetary penalty per violation category when willful neglect is corrected within the required timeframe?

Accepted Answer

$50,000

Answer

HIPAA sets a maximum civil penalty of $50,000 per violation for willful neglect that is corrected within the required period.

Question 2

A company deploys software on 200 servers using a per-core license that allows 16 cores per license. How many licenses are required if each server has 24 physical cores?

Accepted Answer

300

Answer

Each 24-core server needs 24/16 = 1.5 licenses, rounded up to 2, but per-core models typically count actual cores: 200 servers × 24 cores ÷ 16 cores/license = 300 licenses.

Question 3

Which U.S. federal regulation specifically governs the export of encryption software and requires an Export Control Classification Number (ECCN)?

Accepted Answer

EAR

Answer

The Export Administration Regulations (EAR) govern dual-use items including encryption software and assign ECCNs to classify controlled items.

Question 4

An administrator discovers that a vendor's software EULA prohibits reverse engineering. Under which U.S. law does a narrow 'interoperability' exception allow limited reverse engineering despite such contractual prohibitions?

Accepted Answer

Digital Millennium Copyright Act

Answer

The DMCA Section 1201(f) provides an interoperability exception permitting reverse engineering of software solely to achieve compatibility.

Question 5

SOC 2 Type II reports differ from SOC 2 Type I reports primarily because Type II reports:

Accepted Answer

Evaluate design and operating effectiveness over a period of time

Answer

SOC 2 Type II evaluates both the design and operating effectiveness of controls over a defined review period, typically 6–12 months.

(CSA) Certified System Administrator Practice Test

(CSA) Certified System Administrator Practice Test

CSA Regulatory Compliance & Licensing 2