Microsoft Windows 98 Regulatory Frameworks & Compliance 3 — Questions and Answers
Question 1: Section 508 of the Rehabilitation Act (amended in 1998) required U.S. federal agencies procuring software like Windows 98 to ensure:
- Software met FIPS cryptographic standards
- Electronic technology was accessible to employees and members of the public with disabilities (Correct answer)
- Operating systems were certified by NIST before deployment
- All government PCs ran the same OS version
Correct answer: Electronic technology was accessible to employees and members of the public with disabilities
The 1998 Section 508 amendment mandated that federal electronic and information technology be accessible to people with disabilities.
Question 2: Windows 98's built-in Accessibility Options (Sticky Keys, Magnifier) were partly relevant to which regulatory requirement for U.S. federal government deployments?
- HIPAA technical safeguards
- Section 508 of the Rehabilitation Act (Correct answer)
- FISMA security controls
- ADA Title III web accessibility
Correct answer: Section 508 of the Rehabilitation Act
Section 508 required federal agencies to ensure their technology was usable by individuals with disabilities, making built-in accessibility features compliance-relevant.
Question 3: The Computer Fraud and Abuse Act (CFAA) made it illegal for a Windows 98 user to:
- Install shareware without reading the license agreement
- Access another computer without authorization using network features (Correct answer)
- Use Internet Explorer on a school-owned PC for personal browsing
- Run unapproved applications on a corporate Windows 98 machine
Correct answer: Access another computer without authorization using network features
The CFAA prohibits unauthorized access to protected computers, making unauthorized network intrusions via Windows 98 networking features a federal offense.
Question 4: A software asset management (SAM) audit of Windows 98 licenses in a corporation would typically compare the number of installed copies against:
- The total number of employees in the company
- Proof-of-purchase certificates of authenticity and volume license agreements (Correct answer)
- The number of computers purchased in the fiscal year
- Microsoft's OEM shipment records for that region
Correct answer: Proof-of-purchase certificates of authenticity and volume license agreements
SAM audits verify that installed copies are matched by valid licenses documented through Certificates of Authenticity and volume agreements.
Question 5: Microsoft's Volume License Agreement for Windows 98 in corporate environments required organizations to maintain which type of documentation for compliance verification?
- A notarized hardware inventory filed with Microsoft quarterly
- License certificates and purchase records proving each licensed copy (Correct answer)
- A signed network topology map showing all Windows 98 installations
- IRS Form 8594 for each software asset acquisition
Correct answer: License certificates and purchase records proving each licensed copy
Organizations were required to retain proof-of-purchase records and license certificates to demonstrate compliance during an audit.
Question 6: Which FCC regulation was relevant to the hardware on which Windows 98 ran, requiring PCs to limit electromagnetic interference?
- FCC Part 15 Class B certification (Correct answer)
- FCC Part 68 telephone equipment rules
- FCC Part 97 amateur radio standards
- FCC Part 25 satellite equipment rules
Correct answer: FCC Part 15 Class B certification
FCC Part 15 Class B certification required consumer-grade PCs to meet electromagnetic interference (EMI) limits to avoid disrupting other devices.
Question 7: Under ISO/IEC 12207 (software lifecycle processes), organizations deploying Windows 98 in regulated industries were expected to document which phase?
- Source code review of Windows 98 kernel modules
- Acquisition, supply, and maintenance processes for the software (Correct answer)
- Microsoft's internal development methodology
- The TCP/IP protocol stack configuration only
Correct answer: Acquisition, supply, and maintenance processes for the software
ISO/IEC 12207 required organizations to formally document software acquisition, deployment, and maintenance processes, not the vendor's internal development.
Microsoft Windows 98 Regulatory Frameworks & Compliance 3
Section 508 of the Rehabilitation Act (amended in 1998) required U.S. federal agencies procuring software like Windows 98 to ensure: