Installing and Configuring Windows Server 2012 Exam Regulatory Frameworks & Compliance 5

Question 1

Which Windows Server 2012 feature allows you to create a Just Enough Administration (JEA) model by restricting what cmdlets a delegated admin can run in PowerShell?

Accepted Answer

PowerShell Constrained Language Mode via Group Policy AppLocker rules

Answer

AppLocker can restrict PowerShell to Constrained Language Mode, limiting available cmdlets to only what is needed for a role.

Question 2

A compliance requirement mandates that all DNS queries from domain clients be logged for forensic purposes. Which Windows Server 2012 DNS feature supports this?

Accepted Answer

DNS Debug Logging (DNS server diagnostic logging)

Answer

DNS debug logging records all queries and responses to a log file, enabling forensic review of DNS activity.

Question 3

Under NIST 800-171, CUI must be protected with FIPS 140-2 validated encryption. How do you enable FIPS compliance mode in Windows Server 2012?

Accepted Answer

Enable the 'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' policy setting

Answer

The FIPS policy setting in Security Options forces Windows components to use only FIPS 140-2 validated cryptographic modules.

Question 4

An auditor requires proof that your Windows Server 2012 servers have no unnecessary services running, per CIS Benchmark guidance. Which tool quickly identifies and disables unneeded roles and services?

Accepted Answer

Security Configuration Wizard (SCW)

Answer

SCW analyzes the server's role and disables services, ports, and features not required, aligning with CIS attack-surface reduction guidance.

Question 5

GDPR requires that personal data breaches be detected and reported within 72 hours. Which Windows Server 2012 component helps detect unauthorized data access in near real-time?

Accepted Answer

File Server Resource Manager (FSRM) with file screen alerts

Answer

FSRM file screens can trigger email alerts when unauthorized file types or access patterns are detected on file servers.

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Regulatory Frameworks & Compliance 5