MCTS 70-642 Regulatory Frameworks & Compliance 5

Question 1

A Windows Server 2008 administrator needs to comply with DISA STIGs by disabling unnecessary services. Which tool helps identify which services are running and should be reviewed?

Accepted Answer

Security Configuration Wizard (SCW)

Answer

The Security Configuration Wizard analyzes the server's role and recommends disabling unnecessary services, ports, and features, aligning with DISA STIG hardening requirements.

Question 2

GLBA requires financial institutions to have an incident response plan. Which Windows Server 2008 feature provides real-time alerts on suspicious events to support incident detection?

Accepted Answer

Event Log subscriptions forwarding events to a central collector

Answer

Windows Event Log subscriptions allow central collection of security events from multiple servers, enabling real-time detection and alerting for suspicious activity as part of an incident response capability.

Question 3

Under HIPAA, a Business Associate Agreement (BAA) governs third-party access to PHI. In Windows Server 2008, which feature helps technically enforce limited third-party access to specific resources?

Accepted Answer

Active Directory Federation Services (AD FS) for federated identity with restricted claims

Answer

AD FS allows federated identity with claims-based access control, enabling technically enforced, scoped access for third parties consistent with BAA terms without granting full domain access.

Question 4

A compliance framework requires that all administrative actions on Windows Server 2008 domain controllers be attributed to individual accounts, not shared credentials. Which best practice supports this?

Accepted Answer

Use individual admin accounts and enable Audit Account Logon Events and Audit Privilege Use

Answer

Individual admin accounts combined with Audit Account Logon and Audit Privilege Use policies ensure all actions are attributed to specific individuals for accountability and non-repudiation.

Question 5

PCI DSS Requirement 6 mandates that all system components are protected from known vulnerabilities. Which Windows Server 2008 feature provides a current list of missing patches across the environment?

Accepted Answer

WSUS reports showing update compliance status

Answer

WSUS generates compliance reports showing which computers have missing updates, directly supporting PCI DSS Requirement 6 to identify and remediate known vulnerabilities.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Regulatory Frameworks & Compliance 5