Nutanix Exam Regulatory Compliance & Legal Framework 3

Question 1

A healthcare organization using Nutanix Objects must sign which legal agreement with Nutanix before storing ePHI in the object store?

Accepted Answer

Business Associate Agreement (BAA)

Answer

HIPAA requires a BAA between a covered entity and any business associate (including cloud/storage vendors) that processes, stores, or transmits ePHI.

Question 2

Which Nutanix cluster configuration option helps satisfy ISO 27001 Annex A control A.12.3 regarding information backup?

Accepted Answer

Protection Domains with scheduled snapshots replicated to a remote site

Answer

ISO 27001 A.12.3 requires regular tested backups; Nutanix Protection Domains with remote replication directly fulfill this control.

Question 3

Under NIST SP 800-53, the 'Least Privilege' principle for Nutanix administrators is best enforced by:

Accepted Answer

Creating custom Prism Central roles that grant only required permissions

Answer

NIST AC-6 (Least Privilege) requires that users have only the minimum access necessary; custom Prism Central roles allow granular permission assignment.

Question 4

A PCI DSS QSA is reviewing network segmentation. Which Nutanix tool provides evidence that cardholder data environment VMs are isolated from out-of-scope VMs?

Accepted Answer

Nutanix Flow Network Security policy audit exports

Answer

Flow Network Security policies enforce and log micro-segmentation rules; their audit exports provide QSAs with evidence of cardholder data environment isolation.

Question 5

GDPR Article 25 mandates 'Data Protection by Design and by Default.' In a Nutanix deployment, this principle is best demonstrated by:

Accepted Answer

Enabling cluster-wide AES encryption and RBAC from initial deployment

Answer

Data protection by design requires privacy controls to be built in from the start, not added reactively, which maps to enabling encryption and access controls at initial deployment.

Nutanix Exam Practice Test

Nutanix Exam Practice Test

Nutanix Exam Regulatory Compliance & Legal Framework 3