Nutanix Exam Regulatory Compliance & Legal Framework 4

Question 1

A Nutanix customer in the financial sector must comply with DORA (Digital Operational Resilience Act). Which capability is most directly aligned with DORA's ICT risk management pillar?

Accepted Answer

Nutanix Leap with automated failover and RTO/RPO documentation

Answer

DORA's ICT risk management pillar requires documented resilience capabilities with defined recovery objectives, which Nutanix Leap addresses through automated failover with measurable RTO/RPO.

Question 2

Under CCPA, if a California resident requests deletion of their personal data stored in a Nutanix Files share, the organization must:

Accepted Answer

Locate and delete the data within 45 days and verify deletion

Answer

CCPA grants California residents the right to deletion, requiring businesses to verify and complete deletion within 45 calendar days of the verified request.

Question 3

Which Nutanix feature helps an organization meet SOX IT General Controls requirements around change management for infrastructure?

Accepted Answer

Prism Central API-driven change audit trails integrated with ITSM tools

Answer

SOX ITGC change management requires documented, approved changes; Prism Central API audit trails integrated with ITSM tools provide the approval and change evidence auditors require.

Question 4

A Nutanix cluster processes data subject to ITAR (International Traffic in Arms Regulations). Which access control requirement is most critical?

Accepted Answer

Restricting cluster access to U.S. persons only and logging all access attempts

Answer

ITAR requires that controlled defense-related data be accessible only to U.S. persons, with comprehensive access logging to demonstrate compliance.

Question 5

ISO/IEC 27017 extends ISO 27001 with cloud-specific controls. Which Nutanix deployment scenario would require adherence to ISO 27017?

Accepted Answer

A Nutanix Cloud Clusters (NC2) deployment on AWS providing managed services to customers

Answer

ISO 27017 applies to cloud service providers and their customers; NC2 on a public cloud represents a cloud service context where these additional controls are relevant.

Nutanix Exam Practice Test

Nutanix Exam Practice Test

Nutanix Exam Regulatory Compliance & Legal Framework 4