MCSE MSCE Security Protocols & Compliance Standards 2

Question 1

An organization must ensure data transmitted between branch offices is encrypted and authenticated. Which protocol provides both confidentiality and data integrity for site-to-site VPN tunnels?

Accepted Answer

IPsec with ESP in tunnel mode

Answer

IPsec with ESP (Encapsulating Security Payload) in tunnel mode encrypts and authenticates the entire IP packet, making it ideal for site-to-site VPNs.

Question 2

A company's compliance team requires audit logs to be tamper-evident and retained for seven years. Which Windows Server feature best satisfies this requirement?

Accepted Answer

Azure Monitor with Log Analytics workspace retention policy

Answer

Azure Monitor with Log Analytics supports configurable retention up to seven years and provides immutable log storage that satisfies tamper-evident requirements.

Question 3

Which EAP method uses certificates on both the server and client, providing mutual authentication without needing a password?

Accepted Answer

EAP-TLS

Answer

EAP-TLS requires X.509 certificates on both the authenticating server and the client, achieving strong mutual authentication without passwords.

Question 4

Under PCI DSS, which control requires that cardholder data environments use multi-factor authentication for all non-console administrative access?

Accepted Answer

Requirement 8

Answer

PCI DSS Requirement 8 governs identification and authentication of access to system components, including the mandate for MFA for non-console admin access.

Question 5

A security architect needs to prevent internal hosts from initiating connections to known malicious IP addresses. Which Windows Server feature applies this control at the network layer without a third-party firewall?

Accepted Answer

Windows Defender Firewall outbound rules

Answer

Windows Defender Firewall outbound rules can block traffic to specific IP ranges, preventing hosts from reaching known malicious destinations.

(MCSE) Microsoft Certified Solutions Expert Practice Test

(MCSE) Microsoft Certified Solutions Expert Practice Test

MCSE MSCE Security Protocols & Compliance Standards 2