MCTS 70-640 Regulatory Frameworks & Compliance 4

Question 1

A security auditor needs to review which users have the 'Manage auditing and security log' right in your domain. Where is this right configured by default?

Accepted Answer

Default Domain Controllers Policy

Answer

The 'Manage auditing and security log' user right is defined in the Default Domain Controllers Policy GPO, which applies only to domain controllers.

Question 2

Your organization is implementing AD RMS to comply with data classification requirements. Which AD RMS role service issues use licenses that allow users to consume protected content?

Accepted Answer

AD RMS Licensing

Answer

The AD RMS Licensing role service issues use licenses that grant authenticated users the rights to open and interact with RMS-protected content.

Question 3

Which certificate template setting prevents a user from exporting their issued certificate's private key, meeting compliance requirements for non-exportable keys?

Accepted Answer

Do not allow private key to be exported = enabled in the Request Handling tab

Answer

In the certificate template's Request Handling tab, clearing 'Allow private key to be exported' ensures issued private keys cannot be exported from the machine.

Question 4

An internal audit reveals that several service accounts have 'Password never expires' set, violating your compliance policy. Which PowerShell cmdlet would identify all such accounts in bulk?

Accepted Answer

Both A and B return the same results for user accounts

Answer

Both Get-ADUser with a PasswordNeverExpires filter and Search-ADAccount -PasswordNeverExpires identify user accounts where the password never expires.

Question 5

For compliance with NIST SP 800-53, you must ensure that domain computers apply a minimum set of security settings regardless of their OU. Which approach is most appropriate?

Accepted Answer

Link a GPO at the domain level

Answer

Linking a baseline security GPO at the domain level ensures it applies to all computer objects in the domain regardless of which OU they reside in.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Regulatory Frameworks & Compliance 4