MCTS 70-642 Regulatory Frameworks & Compliance 2

Question 1

A healthcare organization must ensure that Windows Server 2008 file servers storing patient records comply with HIPAA. Which feature best enforces access control to protected health information?

Accepted Answer

Active Directory Rights Management Services (AD RMS)

Answer

AD RMS enforces persistent access controls on sensitive documents, ensuring only authorized users can view protected health information regardless of where the file is copied.

Question 2

Under PCI DSS requirements, cardholder data must be encrypted during transmission. Which Windows Server 2008 feature satisfies this requirement for internal network traffic?

Accepted Answer

IPsec policies enforcing encryption between servers

Answer

IPsec policies can enforce encryption of data in transit between servers on the internal network, directly satisfying PCI DSS Requirement 4 for protecting cardholder data over open networks.

Question 3

An auditor requires proof that privileged user access to domain controllers is logged. Which Windows Server 2008 audit policy category should be enabled?

Accepted Answer

Audit Account Logon Events

Answer

Audit Account Logon Events records authentication events when domain accounts log on, providing the auditor with evidence of who accessed domain controllers.

Question 4

SOX compliance requires that changes to financial system configurations be tracked and approved. Which Windows Server 2008 feature supports this by recording configuration changes?

Accepted Answer

Audit Policy Change audit category

Answer

Enabling the Audit Policy Change category logs modifications to audit policies, user rights, and trust relationships, providing a trail of configuration changes for SOX compliance.

Question 5

A company subject to FISMA must implement continuous monitoring of network connections. Which Windows Server 2008 role provides centralized logging of network access attempts?

Accepted Answer

Network Policy Server (NPS)

Answer

Network Policy Server logs all network access requests and authentication attempts centrally, supporting FISMA's continuous monitoring requirement.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Regulatory Frameworks & Compliance 2