Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 4

Question 1

A network administrator is implementing controls for a DoD contractor. Which compliance framework specifically addresses cybersecurity maturity levels for defense contractors?

Accepted Answer

CMMC (Cybersecurity Maturity Model Certification)

Answer

FedRAMP

Answer

FISMA

Answer

SOC 2

Question 2

Under HIPAA, which entity type is primarily responsible for compliance — a hospital that creates patient records or a billing company that processes those records?

Accepted Answer

Both the hospital as a covered entity and the billing company as a business associate

Answer

Only the hospital (covered entity)

Answer

Only the billing company (business associate)

Answer

Neither, if the data is encrypted

Question 3

What is the primary purpose of a SOC 2 Type II report for a cloud service provider?

Accepted Answer

Demonstrating security controls were effective over a period of time (typically 6-12 months)

Answer

Certifying the provider meets PCI DSS requirements

Answer

Confirming the provider is FedRAMP authorized

Answer

Validating GDPR compliance for European customers

Question 4

Which principle in US export control regulations (EAR) restricts the transfer of certain networking technology to foreign nationals even within the United States?

Accepted Answer

Deemed Export Rule

Answer

Anti-boycott Rule

Answer

De Minimis Rule

Answer

Country of Origin Rule

Question 5

An organization is required to conduct annual risk assessments as part of its compliance program. Which NIST document provides guidance on conducting information security risk assessments?

Accepted Answer

NIST SP 800-30

Answer

NIST SP 800-61

Answer

NIST SP 800-53

Answer

NIST SP 800-171

Question 6

A company operating in the EU must transfer personal data to the US. After the invalidation of Privacy Shield, what mechanism is commonly used for lawful EU-US data transfers?

Accepted Answer

Standard Contractual Clauses (SCCs)

Answer

GDPR Article 6 derogation

Answer

Safe Harbor Agreement

Answer

Binding Corporate Rules only

Question 7

Which regulation requires US public companies to maintain internal controls over financial reporting and have executives certify the accuracy of financial statements?

Accepted Answer

SOX Section 302 and 404

Answer

GLBA

Answer

FISMA

Answer

FCPA