Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 3

Question 1

An IT administrator at a defense contractor must comply with regulations protecting Controlled Unclassified Information (CUI). Which NIST publication defines these requirements?

Accepted Answer

NIST SP 800-171

Answer

NIST SP 800-171 defines requirements for protecting CUI in non-federal systems and organizations, particularly for defense contractors.

Question 2

Which compliance framework uses a shared responsibility model where cloud providers and customers each own specific security controls?

Accepted Answer

FedRAMP

Answer

FedRAMP uses a shared responsibility model where the cloud service provider and the federal agency customer each maintain certain security controls.

Question 3

A network engineer must ensure that a system meets CIS Benchmarks. What do CIS Benchmarks primarily provide?

Accepted Answer

Prescriptive configuration guidelines for securing systems

Answer

CIS (Center for Internet Security) Benchmarks provide consensus-based, prescriptive configuration guidelines for securely configuring operating systems, applications, and network devices.

Question 4

Under the Gramm-Leach-Bliley Act (GLBA), which rule requires financial institutions to implement a comprehensive information security program?

Accepted Answer

Safeguards Rule

Answer

The GLBA Safeguards Rule requires financial institutions to implement a written, comprehensive information security program to protect customer financial information.

Question 5

Which international standard provides requirements for establishing, implementing, and maintaining an Information Security Management System (ISMS)?

Accepted Answer

ISO 27001

Answer

ISO/IEC 27001 is the international standard that specifies requirements for establishing and maintaining an Information Security Management System (ISMS).

Microsoft Networking Essentials Exam Practice Test

Microsoft Networking Essentials Exam Practice Test

Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 3