MCSE MSCE Security Protocols & Compliance Standards 3

Question 1

A healthcare organization must comply with HIPAA Security Rule. Which of the following is classified as an 'Addressable' implementation specification rather than 'Required'?

Accepted Answer

Automatic logoff

Answer

Automatic logoff is an Addressable implementation specification under HIPAA, meaning organizations must implement it if reasonable and appropriate or document why not.

Question 2

Which Active Directory feature allows administrators to define fine-grained password policies for specific users or groups without affecting the Default Domain Policy?

Accepted Answer

Password Settings Objects (PSOs)

Answer

Password Settings Objects (PSOs) in Active Directory allow fine-grained password and lockout policies to be applied to specific users or groups, overriding the domain-level policy.

Question 3

A penetration test reveals that an attacker can relay NTLM authentication from one server to another to gain unauthorized access. Which mitigation directly prevents NTLM relay attacks?

Accepted Answer

Enabling SMB signing on all servers

Answer

SMB signing ensures that SMB packets are digitally signed, preventing an attacker from relaying captured NTLM authentication to another server.

Question 4

Under ISO/IEC 27001, which clause specifically requires organizations to determine the context of the organization and identify interested parties?

Accepted Answer

Clause 4 — Context of the Organization

Answer

ISO 27001 Clause 4 requires organizations to understand their internal and external context and identify the needs and expectations of interested parties.

Question 5

Which Windows Server role service provides a centralized policy engine for authenticating and authorizing network access based on RADIUS?

Accepted Answer

Network Policy Server (NPS)

Answer

Network Policy Server (NPS) is the Microsoft implementation of RADIUS, providing centralized authentication, authorization, and accounting for network access.

(MCSE) Microsoft Certified Solutions Expert Practice Test

(MCSE) Microsoft Certified Solutions Expert Practice Test

MCSE MSCE Security Protocols & Compliance Standards 3