Installing and Configuring Windows Server 2012 Exam Regulatory Frameworks & Compliance 4

Question 1

A compliance auditor asks you to demonstrate that privileged access is monitored on Windows Server 2012. Which audit subcategory should be enabled to track use of sensitive privileges?

Accepted Answer

Audit Privilege Use

Answer

Enabling 'Audit Privilege Use' records events whenever a user exercises a user right, satisfying privileged-access monitoring requirements.

Question 2

Your organization is subject to CJIS Security Policy and must enforce multi-factor authentication. Which Windows Server 2012 feature supports certificate-based smart card authentication?

Accepted Answer

Active Directory Certificate Services (AD CS) with smart card enrollment

Answer

AD CS issues smart card certificates, enabling PKI-based MFA which meets CJIS requirements for advanced authentication.

Question 3

Under DISA STIG guidance, the default Administrator account should be renamed. How do you enforce this across all domain computers using Windows Server 2012?

Accepted Answer

Use a Group Policy setting under Security Options: 'Accounts: Rename administrator account'

Answer

The 'Accounts: Rename administrator account' GPO setting pushes the rename to all computers in the linked scope.

Question 4

PCI DSS requirement 10 requires time synchronization across all systems. Which Windows Server 2012 service ensures consistent timestamps for audit logs?

Accepted Answer

Windows Time Service (W32tm)

Answer

Windows Time Service synchronizes clocks across domain members using the domain controller as the authoritative time source.

Question 5

A SOC 2 Type II audit requires evidence that access is revoked promptly when employees leave. Which process in Windows Server 2012 Active Directory directly addresses this?

Accepted Answer

Disabling and then deleting user accounts per the offboarding procedure

Answer

Disabling the account immediately blocks access, and subsequent deletion removes the account, fulfilling prompt access revocation.

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Regulatory Frameworks & Compliance 4