MCTS 70-642 Regulatory Frameworks & Compliance 3

Question 1

A Windows Server 2008 administrator must comply with PCI DSS Requirement 8, which mandates unique IDs for each person with computer access. Which policy enforces this?

Accepted Answer

Disable the Guest account and require individual user accounts via GPO

Answer

Disabling the Guest account and requiring individual user accounts ensures each person has a unique ID, directly satisfying PCI DSS Requirement 8.

Question 2

HIPAA's Minimum Necessary standard requires limiting access to the minimum data needed. Which Windows Server 2008 mechanism best implements this at the file level?

Accepted Answer

NTFS permissions scoped by security group and role

Answer

NTFS permissions allow granular, role-based access control at the file and folder level, ensuring users can access only the minimum necessary data.

Question 3

An organization's security policy requires that all network communications between Windows Server 2008 servers use FIPS 140-2 validated cryptography. Where is this setting configured?

Accepted Answer

In the Local Security Policy under System Cryptography

Answer

The 'System cryptography: Use FIPS compliant algorithms' setting in Local (or Group) Security Policy enforces FIPS 140-2 validated cryptographic modules across the server.

Question 4

A compliance officer requires that accounts inactive for 90 days be automatically disabled. Which tool in Windows Server 2008 automates this process?

Accepted Answer

dsmod with a scheduled task or dsquery piped to dsmod

Answer

Using dsquery to find inactive accounts and piping the results to dsmod to disable them, run via a scheduled task, automates the 90-day account deactivation requirement.

Question 5

Under ISO 27001 controls, password policies must enforce complexity and history. Which Windows Server 2008 feature allows different password policies for different user groups?

Accepted Answer

Fine-Grained Password Policies (PSO) in AD DS

Answer

Fine-Grained Password Policies allow administrators to apply different password complexity and history requirements to specific users or groups within the same domain.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Regulatory Frameworks & Compliance 3