Nutanix Exam Regulatory Compliance & Legal Framework 5

Question 1

A Nutanix administrator must implement controls to satisfy PCI DSS Requirement 8 regarding unique user IDs. Which action best fulfills this requirement?

Accepted Answer

Integrating Prism Central with Active Directory so each admin has a unique named account

Answer

PCI DSS Req 8 prohibits shared accounts and requires unique IDs for all users; AD integration in Prism Central ensures each administrator authenticates with their own identity.

Question 2

Under HIPAA's Breach Notification Rule, if a Nutanix cluster containing ePHI is compromised, covered entities must notify affected individuals within:

Accepted Answer

60 calendar days of discovery

Answer

HIPAA's Breach Notification Rule requires covered entities to notify affected individuals without unreasonable delay and no later than 60 calendar days from discovery of the breach.

Question 3

A Nutanix deployment must comply with FIPS 140-2. Which cluster configuration change is required?

Accepted Answer

Enabling FIPS mode, which restricts the cluster to FIPS-validated cryptographic algorithms only

Answer

Enabling FIPS mode in Nutanix restricts the operating system and services to only FIPS 140-2 validated cryptographic modules, disabling non-compliant algorithms.

Question 4

Which Nutanix feature helps meet the NIST Cybersecurity Framework 'Detect' function by identifying anomalous VM behavior?

Accepted Answer

Nutanix Security Central behavioral analytics and anomaly detection

Answer

The NIST CSF 'Detect' function requires continuous monitoring for anomalies; Nutanix Security Central provides behavioral analytics that identify deviations from baseline VM activity.

Question 5

An organization subject to NYDFS Cybersecurity Regulation (23 NYCRR 500) must submit an annual Certification of Compliance. Which Nutanix audit capability supports this process?

Accepted Answer

Prism Central audit logs demonstrating continuous control implementation throughout the year

Answer

NYDFS 23 NYCRR 500 requires annual certification backed by evidence of year-round control implementation; Prism Central audit logs provide continuous activity records to support this attestation.

Nutanix Exam Practice Test

Nutanix Exam Practice Test

Nutanix Exam Regulatory Compliance & Legal Framework 5