Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 4

Question 1

A network administrator is implementing controls for a DoD contractor. Which compliance framework specifically addresses cybersecurity maturity levels for defense contractors?

Accepted Answer

CMMC (Cybersecurity Maturity Model Certification)

Answer

CMMC (Cybersecurity Maturity Model Certification) is a DoD framework that assesses and certifies the cybersecurity posture of defense contractors across maturity levels.

Question 2

Under HIPAA, which entity type is primarily responsible for compliance — a hospital that creates patient records or a billing company that processes those records?

Accepted Answer

Both the hospital as a covered entity and the billing company as a business associate

Answer

HIPAA applies to both covered entities (like hospitals) and their business associates (like billing companies) that handle protected health information.

Question 3

What is the primary purpose of a SOC 2 Type II report for a cloud service provider?

Accepted Answer

Demonstrating security controls were effective over a period of time (typically 6-12 months)

Answer

A SOC 2 Type II report provides an audit opinion on whether a service organization's controls were operating effectively over a defined review period.

Question 4

Which principle in US export control regulations (EAR) restricts the transfer of certain networking technology to foreign nationals even within the United States?

Accepted Answer

Deemed Export Rule

Answer

The Deemed Export Rule treats sharing controlled technology with a foreign national in the US as an export to their home country, requiring an export license.

Question 5

An organization is required to conduct annual risk assessments as part of its compliance program. Which NIST document provides guidance on conducting information security risk assessments?

Accepted Answer

NIST SP 800-30

Answer

NIST SP 800-30 provides guidance for conducting risk assessments of federal information systems and organizations.

Microsoft Networking Essentials Exam Practice Test

Microsoft Networking Essentials Exam Practice Test

Microsoft Networking Essentials Exam Regulatory Frameworks & Compliance 4