MCSE MSCE Security Protocols & Compliance Standards 5 — Questions and Answers
Question 1: An organization wants to ensure its cloud workloads in Azure meet NIST SP 800-53 controls. Which Azure service provides a compliance dashboard mapping Azure resource configurations to specific control frameworks?
- Azure Security Center Secure Score
- Microsoft Defender for Cloud Regulatory Compliance (Correct answer)
- Azure Policy Initiative definitions only
- Microsoft Sentinel compliance workbook
Correct answer: Microsoft Defender for Cloud Regulatory Compliance
Microsoft Defender for Cloud's Regulatory Compliance dashboard maps Azure resource assessments to specific controls in frameworks like NIST SP 800-53, PCI DSS, and ISO 27001.
Question 2: Which SMB dialect introduced end-to-end encryption natively without requiring IPsec or VPN for protecting file shares?
- SMB 1.0
- SMB 2.1
- SMB 3.0 (Correct answer)
- SMB 2.0
Correct answer: SMB 3.0
SMB 3.0, introduced in Windows Server 2012, added native SMB encryption that protects data in transit across file shares without requiring IPsec.
Question 3: Under the NIST Cybersecurity Framework, which function encompasses activities to detect the occurrence of a cybersecurity event in a timely manner?
- Protect
- Respond
- Detect (Correct answer)
- Recover
Correct answer: Detect
The 'Detect' function of the NIST CSF includes activities and controls designed to identify cybersecurity events such as anomalies and security events in a timely manner.
Question 4: A Windows Server administrator needs to ensure that remote desktop connections use Network Level Authentication (NLA). Where is this setting configured?
- System Properties > Remote tab — 'Allow connections only from computers running Remote Desktop with NLA' (Correct answer)
- Group Policy: Computer Configuration > Administrative Templates > Terminal Services > Encryption Level
- Registry: HKLM\SYSTEM\RDP\NLAEnabled = 1
- Remote Desktop Services role > RD Gateway properties
Correct answer: System Properties > Remote tab — 'Allow connections only from computers running Remote Desktop with NLA'
NLA for Remote Desktop can be enabled in System Properties on the Remote tab by selecting the option requiring NLA, or equivalently through Group Policy under Remote Desktop Session Host security settings.
Question 5: Which certificate field is used by browsers to validate the hostname of a web server and has replaced the Common Name (CN) field as the authoritative source for hostname verification?
- Subject Alternative Name (SAN) (Correct answer)
- Enhanced Key Usage (EKU)
- Certificate Policy extension
- Authority Information Access (AIA)
Correct answer: Subject Alternative Name (SAN)
Subject Alternative Name (SAN) extensions are now the authoritative field for hostname validation; modern browsers ignore CN and only check SANs per RFC 2818 and CA/Browser Forum requirements.
Question 6: An organization must implement data classification and prevent sensitive documents labeled 'Confidential' from being emailed externally. Which Microsoft technology enforces this policy at the content level?
- Azure Active Directory Conditional Access
- Microsoft Purview Information Protection with DLP policies (Correct answer)
- Exchange transport rules based on keywords only
- SharePoint permission levels
Correct answer: Microsoft Purview Information Protection with DLP policies
Microsoft Purview Information Protection combined with Data Loss Prevention (DLP) policies can detect sensitivity labels and block or restrict transmission of labeled documents via email.
Question 7: Which Windows Server security feature uses a hardware root of trust to attest that a device booted with known-good firmware and OS components before granting network access?
- Windows Hello for Business
- Device Health Attestation (DHA) (Correct answer)
- Secure Channel (Schannel)
- Protected Users security group
Correct answer: Device Health Attestation (DHA)
Device Health Attestation (DHA) uses TPM measurements and the Windows Health Attestation Service to verify boot integrity, enabling conditional access decisions based on device health.
MCSE MSCE Security Protocols & Compliance Standards 5
An organization wants to ensure its cloud workloads in Azure meet NIST SP 800-53 controls.
Which Azure service provides a compliance dashboard mapping Azure resource configurations to specific control frameworks?