Installing and Configuring Windows Server 2012 Exam Regulatory Frameworks & Compliance 2 — Questions and Answers
Question 1: Your organization must comply with HIPAA. Which Windows Server 2012 feature best helps enforce data encryption for Protected Health Information (PHI) stored on disk?
- BitLocker Drive Encryption (Correct answer)
- Encrypting File System (EFS)
- NTFS permissions
- Windows Firewall with Advanced Security
Correct answer: BitLocker Drive Encryption
BitLocker Drive Encryption provides full-volume encryption, protecting PHI on disk even if the physical drive is removed.
Question 2: Under PCI DSS, you must restrict access to cardholder data on a need-to-know basis. Which Windows Server 2012 component is the PRIMARY tool for implementing this?
- Group Policy Objects (GPOs)
- Role-Based Access Control (RBAC) via Active Directory (Correct answer)
- Windows Defender
- Network Policy Server (NPS)
Correct answer: Role-Based Access Control (RBAC) via Active Directory
RBAC through Active Directory allows assigning permissions based on job roles, directly meeting PCI DSS least-privilege requirements.
Question 3: A FISMA audit requires you to document all changes to security settings on domain controllers. Which Windows Server 2012 feature should you enable?
- Performance Monitor
- Advanced Audit Policy Configuration (Correct answer)
- Resource Monitor
- Event Forwarding only
Correct answer: Advanced Audit Policy Configuration
Advanced Audit Policy Configuration provides granular event logging for security changes, satisfying FISMA change-tracking requirements.
Question 4: SOX compliance requires separation of duties between server administrators and those who can approve changes. How does Windows Server 2012 support this?
- By using a single Administrator account for all tasks
- By creating separate AD groups with distinct delegated permissions (Correct answer)
- By enabling Remote Desktop for all users
- By disabling UAC on servers
Correct answer: By creating separate AD groups with distinct delegated permissions
Separate AD groups with delegated permissions enforce separation of duties so no single user controls both implementation and approval.
Question 5: Which Windows Server 2012 tool generates a report showing how current security settings compare against a predefined security template?
- Security Configuration Wizard (SCW)
- Security Configuration and Analysis snap-in (Correct answer)
- Local Security Policy editor
- Microsoft Baseline Security Analyzer (MBSA)
Correct answer: Security Configuration and Analysis snap-in
The Security Configuration and Analysis snap-in compares current settings against a saved template and highlights discrepancies.
Question 6: GLBA requires financial institutions to protect customer data in transit. Which protocol should you enforce on Windows Server 2012 IIS to meet this requirement?
- FTP over port 21
- HTTP on port 80
- TLS (HTTPS) on port 443 (Correct answer)
- Telnet on port 23
Correct answer: TLS (HTTPS) on port 443
TLS/HTTPS encrypts data in transit, which is required by GLBA to protect non-public personal financial information.
Question 7: A compliance officer requires that failed login attempts be recorded for all servers. Where in Windows Server 2012 Group Policy do you configure this?
- Computer Configuration > Windows Settings > Security Settings > Account Policies > Account Lockout Policy
- Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy (Correct answer)
- User Configuration > Administrative Templates > System
- Computer Configuration > Administrative Templates > Network
Correct answer: Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy
Audit Policy under Local Policies controls logon auditing, enabling logging of failed authentication attempts.
Installing and Configuring Windows Server 2012 Exam Regulatory Frameworks & Compliance 2
Your organization must comply with HIPAA.
Which Windows Server 2012 feature best helps enforce data encryption for Protected Health Information (PHI) stored on disk?