MCTS 70-642 Regulatory Frameworks & Compliance 4

Question 1

A Windows Server 2008 network must comply with SOX by ensuring that no single administrator can both make and approve changes to financial systems. This is an example of which control principle?

Accepted Answer

Separation of Duties

Answer

Separation of Duties ensures that critical tasks require multiple individuals, preventing any single person from making unauthorized changes to financial systems without oversight.

Question 2

An administrator must demonstrate compliance with CIS Benchmarks for Windows Server 2008. Which built-in tool analyzes the server's security configuration against a defined baseline?

Accepted Answer

Microsoft Baseline Security Analyzer (MBSA)

Answer

MBSA scans Windows servers for missing security updates and common security misconfigurations, making it the primary built-in tool for baseline security compliance analysis.

Question 3

Under HIPAA Security Rule, covered entities must implement automatic logoff for workstations. Which Group Policy setting enforces this on Windows Server 2008 member servers?

Accepted Answer

Interactive logon: Machine inactivity limit

Answer

The 'Machine inactivity limit' Group Policy setting automatically locks or logs off a workstation after a defined period of inactivity, satisfying the HIPAA automatic logoff requirement.

Question 4

PCI DSS requires that all system clocks be synchronized to ensure accurate audit log timestamps. Which protocol and Windows Server 2008 service fulfill this requirement?

Accepted Answer

NTP synchronized via Windows Time Service (W32tm)

Answer

The Windows Time Service (W32tm) uses NTP to synchronize clocks across the domain, ensuring that audit log timestamps are accurate and consistent as required by PCI DSS.

Question 5

A NIST 800-53 control requires that the operating system protect audit records from unauthorized deletion. Which Windows Server 2008 setting directly enforces this?

Accepted Answer

Restrict event log access permissions so only Administrators can clear logs

Answer

Restricting the Security event log permissions so only administrators can clear it prevents unauthorized deletion or tampering with audit records.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Regulatory Frameworks & Compliance 4