SCP-500 Regulatory Frameworks & Compliance 2

Question 1

Under HIPAA, which SolarWinds feature helps demonstrate that audit logs have not been tampered with?

Accepted Answer

Log Analyzer hash verification

Answer

SolarWinds Log Analyzer uses hash-based integrity verification to prove logs are unaltered, satisfying HIPAA audit control requirements.

Question 2

Which compliance framework explicitly requires organizations to segment cardholder data environments from other networks?

Accepted Answer

PCI DSS

Answer

PCI DSS Requirement 1 mandates network segmentation to isolate cardholder data environments, which SolarWinds NCM can help audit.

Question 3

A SolarWinds NCM compliance report shows a router config deviating from a baseline. Under NIST 800-53, which control family does this fall under?

Accepted Answer

Configuration Management (CM)

Answer

NIST 800-53 Configuration Management (CM) controls govern baseline configurations and deviation detection.

Question 4

Which SolarWinds product is MOST directly used to satisfy GDPR requirements around monitoring access to personal data stores?

Accepted Answer

SolarWinds Database Performance Analyzer

Answer

Database Performance Analyzer tracks query-level access to databases, enabling audit trails for GDPR Article 30 records of processing activities.

Question 5

FISMA requires federal agencies to categorize information systems by impact level. Which standard defines these impact levels?

Accepted Answer

FIPS 199

Answer

FIPS 199 defines the standards for security categorization of federal information and information systems as Low, Moderate, or High.

SCP-500 - Solarwinds Certified Professional Practice Test