SCP-500 Regulatory Frameworks & Compliance 4

Question 1

Which SolarWinds NCM feature enables automated remediation when a device configuration drifts from its compliance baseline?

Accepted Answer

Config Change Templates with automatic rollback

Answer

NCM Config Change Templates can automatically push corrective configurations when drift is detected, enforcing continuous compliance.

Question 2

A healthcare organization must comply with HIPAA's Technical Safeguard for automatic logoff. How can SolarWinds SAM help verify this control?

Accepted Answer

By monitoring session timeout settings on application servers

Answer

SAM can monitor application-level metrics and alert when session timeout configurations are not set correctly on healthcare application servers.

Question 3

Under FedRAMP, continuous monitoring requires vulnerability scanning at defined frequencies. Which SolarWinds integration supports this requirement?

Accepted Answer

Integration with Tenable or Qualys via SolarWinds Orion SDK

Answer

SolarWinds Orion integrates with vulnerability scanners like Tenable/Qualys to provide unified visibility needed for FedRAMP continuous monitoring.

Question 4

The EU NIS2 Directive requires operators of essential services to report significant incidents within how many hours?

Accepted Answer

24 hours

Answer

NIS2 requires an early warning to authorities within 24 hours of becoming aware of a significant incident, with a full report within 72 hours.

Question 5

Which SolarWinds SIEM feature BEST supports PCI DSS Requirement 11.4 (intrusion detection/prevention techniques)?

Accepted Answer

Security Event Manager real-time correlation rules

Answer

SolarWinds Security Event Manager applies real-time correlation rules to detect intrusion patterns, directly addressing PCI DSS Requirement 11.4.

SCP-500 - Solarwinds Certified Professional Practice Test