Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 2

Question 1

Which US federal law governs the privacy of student education records and applies to institutions that receive federal funding?

Accepted Answer

FERPA

Answer

FERPA (Family Educational Rights and Privacy Act) protects the privacy of student education records at federally funded institutions.

Question 2

An organization must retain network logs for 7 years for audit purposes. Which compliance framework most likely mandates this for financial institutions?

Accepted Answer

SOX (Sarbanes-Oxley Act)

Answer

SOX requires financial institutions to retain certain records, including audit logs, for a minimum of 7 years.

Question 3

A company processes credit card payments online. Which standard mandates that cardholder data must be encrypted during transmission over public networks?

Accepted Answer

PCI DSS

Answer

PCI DSS Requirement 4 mandates encryption of cardholder data transmitted over open, public networks.

Question 4

Which NIST publication provides a comprehensive framework for improving critical infrastructure cybersecurity?

Accepted Answer

NIST CSF (Cybersecurity Framework)

Answer

The NIST Cybersecurity Framework (CSF) provides a voluntary framework for organizations to manage and reduce cybersecurity risk to critical infrastructure.

Question 5

Under GDPR, what is the maximum time an organization has to report a data breach to the supervisory authority after becoming aware of it?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires notifying the supervisory authority within 72 hours of becoming aware of a personal data breach.

Microsoft Networking Essentials Exam Practice Test

Microsoft Networking Essentials Exam Practice Test

Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 2