SCP-500 Regulatory Frameworks & Compliance 3

Question 1

A financial institution using SolarWinds needs to prove network device changes were authorized before implementation. Which framework's change management requirement does this address?

Accepted Answer

SOX ITGC controls

Answer

SOX IT General Controls (ITGC) require authorized change management processes, which NCM's change tracking directly supports.

Question 2

Under PCI DSS Requirement 10, which SolarWinds tool BEST satisfies the need to review logs of all system components daily?

Accepted Answer

SolarWinds Log Analyzer

Answer

PCI DSS Requirement 10.6 mandates daily log reviews, and SolarWinds Log Analyzer provides automated log aggregation and alerting to streamline this process.

Question 3

Which NIST Cybersecurity Framework function does SolarWinds Network Performance Monitor MOST directly support?

Accepted Answer

Detect

Answer

NPM continuously monitors network anomalies and generates alerts, directly supporting the NIST CSF 'Detect' function.

Question 4

An organization subject to NERC CIP must track all electronic access to critical cyber assets. Which SolarWinds feature supports this?

Accepted Answer

SolarWinds Log Analyzer syslog collection

Answer

NERC CIP-006 and CIP-007 require logging of electronic access, which SolarWinds Log Analyzer satisfies by collecting and correlating syslog/SNMP trap data.

Question 5

ISO/IEC 27001 Annex A control A.12.4 requires event logging. How does SolarWinds help organizations meet this control?

Accepted Answer

By providing centralized log collection, analysis, and alert-based notification

Answer

SolarWinds Log Analyzer and Security Event Manager centralize log collection and enable alerting, directly satisfying ISO 27001 A.12.4 event logging controls.

SCP-500 - Solarwinds Certified Professional Practice Test

SCP-500 - Solarwinds Certified Professional Practice Test

SCP-500 Regulatory Frameworks & Compliance 3