Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 3

Question 1

An IT administrator at a defense contractor must comply with regulations protecting Controlled Unclassified Information (CUI). Which NIST publication defines these requirements?

Accepted Answer

NIST SP 800-171

Answer

NIST SP 800-53

Answer

NIST SP 800-37

Answer

NIST SP 800-61

Question 2

Which compliance framework uses a shared responsibility model where cloud providers and customers each own specific security controls?

Accepted Answer

FedRAMP

Answer

PCI DSS

Answer

SOX

Answer

FERPA

Question 3

A network engineer must ensure that a system meets CIS Benchmarks. What do CIS Benchmarks primarily provide?

Accepted Answer

Prescriptive configuration guidelines for securing systems

Answer

Legal requirements for data handling

Answer

Penetration testing methodologies

Answer

Incident response procedures

Question 4

Under the Gramm-Leach-Bliley Act (GLBA), which rule requires financial institutions to implement a comprehensive information security program?

Accepted Answer

Safeguards Rule

Answer

Financial Privacy Rule

Answer

Pretexting Protection Rule

Answer

Customer Identification Rule

Question 5

Which international standard provides requirements for establishing, implementing, and maintaining an Information Security Management System (ISMS)?

Accepted Answer

ISO 27001

Answer

ISO 9001

Answer

ISO 31000

Answer

ISO 22301

Question 6

A company operating in California must comply with CCPA. What is a key right CCPA grants to consumers?

Accepted Answer

Right to know what personal information is collected and request its deletion

Answer

Right to receive free credit monitoring

Answer

Right to data portability across all US states

Answer

Right to opt out of all digital advertising globally

Question 7

Which US government authorization process must cloud service providers complete to offer services to federal agencies?

Accepted Answer

FedRAMP authorization

Answer

FISMA certification

Answer

CMMC accreditation

Answer

StateRAMP approval