MCSE MSCE Security Protocols & Compliance Standards 5

Question 1

An organization wants to ensure its cloud workloads in Azure meet NIST SP 800-53 controls. Which Azure service provides a compliance dashboard mapping Azure resource configurations to specific control frameworks?

Accepted Answer

Microsoft Defender for Cloud Regulatory Compliance

Answer

Microsoft Defender for Cloud's Regulatory Compliance dashboard maps Azure resource assessments to specific controls in frameworks like NIST SP 800-53, PCI DSS, and ISO 27001.

Question 2

Which SMB dialect introduced end-to-end encryption natively without requiring IPsec or VPN for protecting file shares?

Accepted Answer

SMB 3.0

Answer

SMB 3.0, introduced in Windows Server 2012, added native SMB encryption that protects data in transit across file shares without requiring IPsec.

Question 3

Under the NIST Cybersecurity Framework, which function encompasses activities to detect the occurrence of a cybersecurity event in a timely manner?

Accepted Answer

Detect

Answer

The 'Detect' function of the NIST CSF includes activities and controls designed to identify cybersecurity events such as anomalies and security events in a timely manner.

Question 4

A Windows Server administrator needs to ensure that remote desktop connections use Network Level Authentication (NLA). Where is this setting configured?

Accepted Answer

System Properties > Remote tab — 'Allow connections only from computers running Remote Desktop with NLA'

Answer

NLA for Remote Desktop can be enabled in System Properties on the Remote tab by selecting the option requiring NLA, or equivalently through Group Policy under Remote Desktop Session Host security settings.

Question 5

Which certificate field is used by browsers to validate the hostname of a web server and has replaced the Common Name (CN) field as the authoritative source for hostname verification?

Accepted Answer

Subject Alternative Name (SAN)

Answer

Subject Alternative Name (SAN) extensions are now the authoritative field for hostname validation; modern browsers ignore CN and only check SANs per RFC 2818 and CA/Browser Forum requirements.

(MCSE) Microsoft Certified Solutions Expert Practice Test

(MCSE) Microsoft Certified Solutions Expert Practice Test

MCSE MSCE Security Protocols & Compliance Standards 5