HP Security & Compliance Standards 5

Question 1

A government agency requires HP PCs to meet STIG (Security Technical Implementation Guide) standards. Who publishes STIGs?

Accepted Answer

Defense Information Systems Agency (DISA)

Answer

STIGs are published by DISA (Defense Information Systems Agency) and provide mandatory security configuration standards for US Department of Defense systems.

Question 2

HP Absolute (formerly Computrace) provides which compliance-relevant capability for lost or stolen HP devices?

Accepted Answer

Persistent device tracking and remote data wipe embedded below the OS

Answer

HP Absolute provides persistent, firmware-embedded tracking and remote wipe capability that survives OS reinstalls, helping organizations comply with data breach notification laws.

Question 3

Which network protocol standard, often enforced in HP printer configurations, authenticates devices before granting network access?

Accepted Answer

IEEE 802.1X

Answer

IEEE 802.1X is the port-based network access control standard that requires devices to authenticate before being granted network access, commonly configured on HP printers.

Question 4

In HP's security framework, what does 'Below the OS' security refer to?

Accepted Answer

Protection mechanisms operating in firmware and hardware before the OS loads

Answer

'Below the OS' security refers to HP's approach of embedding security in firmware and dedicated hardware processors, making protections resilient against OS-level compromise.

Question 5

When configuring HP printers for SOX compliance, which control is most important for ensuring audit trail integrity?

Accepted Answer

Configuring syslog forwarding of all printer events to a SIEM

Answer

SOX requires reliable audit trails; forwarding printer event logs to a SIEM ensures all access and configuration changes are recorded and tamper-evident.

(HP) HP Certified Professional Practice Test

(HP) HP Certified Professional Practice Test

HP Security & Compliance Standards 5