Regulatory Frameworks & Compliance Flashcards
7 cards from real Installing and Configuring Windows Server 2012 Exam practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Frameworks & Compliance flashcards as text
You need to meet NIST SP 800-53 requirements for patch management. Which Windows Server 2012 role/feature automates patch distribution across your domain?
Answer: Windows Server Update Services (WSUS)
WSUS is the built-in Windows Server role that centrally manages and distributes approved patches to domain-joined computers.
FERPA requires protecting student education records. A Windows Server 2012 administrator should configure which setting to prevent unauthorized users from viewing sensitive shared folders?
Answer: Apply NTFS permissions and Share permissions following least privilege
Combining restrictive NTFS and Share permissions with least privilege ensures only authorized users access student records.
Under ISO 27001, you must demonstrate a formal risk assessment process. Which Windows Server 2012 built-in feature helps document security baselines as part of this process?
Answer: Security Configuration Wizard (SCW)
SCW guides administrators through role-based security configuration and produces XML policy files that document the baseline.
A PCI DSS requirement mandates that a unique ID be assigned to each person with computer access. How is this enforced in Windows Server 2012 Active Directory?
Answer: By creating individual user accounts in AD with no shared credentials
Individual AD user accounts provide unique identifiers and enable per-user accountability required by PCI DSS requirement 8.
Which Windows Server 2012 feature allows you to enforce that USB storage devices cannot be used on servers, supporting data loss prevention (DLP) compliance?
Answer: Group Policy Device Installation Restrictions
Group Policy Device Installation Restrictions can block installation of removable storage devices, preventing unauthorized data exfiltration.
For HIPAA compliance, audit logs must be retained for six years. Where in Windows Server 2012 do you configure Event Log retention settings?
Answer: Event Viewer > Log Properties (maximum log size and retention method)
Each event log's Properties dialog in Event Viewer lets you set the maximum size and whether to overwrite or archive logs.
NERC CIP standards require physical and logical access controls for critical infrastructure. Which Active Directory feature in Windows Server 2012 helps restrict which computers privileged accounts can log on to?
Answer: Account tab 'Log On To' restrictions in AD user properties
The 'Log On To' setting in an AD user account restricts which workstations or servers that account can authenticate to.