MCTS 70-640 Regulatory Frameworks & Compliance 2

Question 1

Your organization must comply with SOX requirements and needs to ensure that all privileged AD account activity is logged. Which audit policy subcategory should you enable?

Accepted Answer

Audit Privilege Use

Answer

Audit Privilege Use tracks when a user exercises a user right, which is required to log privileged account activity for SOX compliance.

Question 2

A compliance officer requires that all domain controllers retain security event logs for at least 90 days without overwriting. Which Group Policy setting controls this?

Accepted Answer

Retention method for security log

Answer

The 'Retention method for security log' policy set to 'Do not overwrite events' ensures logs are preserved until manually cleared.

Question 3

Under HIPAA compliance, your AD environment must enforce automatic workstation lockout after a period of inactivity. Which GPO setting accomplishes this?

Accepted Answer

Interactive logon: Machine inactivity limit

Answer

'Interactive logon: Machine inactivity limit' is the Windows Server 2008 security policy that locks the workstation after a set idle period.

Question 4

Which Windows Server 2008 feature allows you to apply different password complexity and length requirements to specific AD security groups rather than the entire domain?

Accepted Answer

Password Settings Objects (PSOs)

Answer

Password Settings Objects (PSOs) implement fine-grained password policies, allowing different password requirements for specific users or groups.

Question 5

For PCI-DSS compliance, an administrator must ensure that service accounts cannot be used for interactive logon. Which setting should be applied?

Accepted Answer

Deny log on locally

Answer

'Deny log on locally' user right prevents the specified accounts from interactively logging on to any machine where the GPO applies.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Regulatory Frameworks & Compliance 2