Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 2

Question 1

Which US federal law governs the privacy of student education records and applies to institutions that receive federal funding?

Accepted Answer

FERPA

Answer

HIPAA

Answer

COPPA

Answer

GLBA

Question 2

An organization must retain network logs for 7 years for audit purposes. Which compliance framework most likely mandates this for financial institutions?

Accepted Answer

SOX (Sarbanes-Oxley Act)

Answer

HIPAA

Answer

PCI DSS

Answer

FERPA

Question 3

A company processes credit card payments online. Which standard mandates that cardholder data must be encrypted during transmission over public networks?

Accepted Answer

PCI DSS

Answer

ISO 27001

Answer

NIST CSF

Answer

FTC Act

Question 4

Which NIST publication provides a comprehensive framework for improving critical infrastructure cybersecurity?

Accepted Answer

NIST CSF (Cybersecurity Framework)

Answer

NIST SP 800-53

Answer

NIST SP 800-171

Answer

NIST SP 800-37

Question 5

Under GDPR, what is the maximum time an organization has to report a data breach to the supervisory authority after becoming aware of it?

Accepted Answer

72 hours

Answer

24 hours

Answer

48 hours

Answer

7 days

Question 6

A healthcare network administrator is configuring access controls for electronic health records. Which HIPAA rule primarily governs these technical safeguards?

Accepted Answer

HIPAA Security Rule

Answer

HIPAA Privacy Rule

Answer

HIPAA Breach Notification Rule

Answer

HIPAA Enforcement Rule

Question 7

Which of the following best describes the purpose of the Children's Online Privacy Protection Act (COPPA)?

Accepted Answer

Requires parental consent before collecting personal data from children under 13

Answer

Protects children from cyberbullying on social media

Answer

Mandates content filtering on school networks

Answer

Restricts minors from accessing adult websites