SCP-500 Regulatory Frameworks & Compliance 5

Question 1

A SolarWinds administrator needs to demonstrate that privileged access to network devices is monitored per CIS Control 6. Which tool provides this evidence?

Accepted Answer

NCM audit logs of device login activity

Answer

CIS Control 6 requires controlled use of administrative privileges, and NCM logs all authenticated access and changes to network devices.

Question 2

Under DORA (Digital Operational Resilience Act) for financial entities, ICT risk management must include monitoring of third-party service providers. Which SolarWinds feature supports this?

Accepted Answer

NPM monitoring of external service endpoints and SLAs

Answer

NPM can monitor availability and performance of third-party service endpoints, providing the continuous ICT risk visibility DORA requires.

Question 3

Which SolarWinds product helps organizations meet NIST 800-171 requirement 3.3.1 (creating and retaining system audit logs)?

Accepted Answer

SolarWinds Security Event Manager

Answer

SolarWinds Security Event Manager collects, retains, and analyzes audit logs from systems across the environment to satisfy NIST 800-171 audit logging requirements.

Question 4

An auditor asks for proof that firewall rule changes were reviewed and approved. Which SolarWinds workflow BEST provides this evidence?

Accepted Answer

NCM change management workflow with approval gates and audit trail

Answer

NCM's change management workflow captures approval gates, timestamps, and the identity of who made each change, providing complete firewall change audit evidence.

Question 5

Which regulation specifically requires covered entities to have a formal sanctions policy for employees who violate security policies, which SolarWinds alerting can help enforce?

Accepted Answer

HIPAA Security Rule §164.308(a)(1)(ii)(C)

Answer

HIPAA Security Rule §164.308(a)(1)(ii)(C) requires a sanctions policy for security violations, and SolarWinds SEM alerts can document the violations triggering those sanctions.

SCP-500 - Solarwinds Certified Professional Practice Test

SCP-500 - Solarwinds Certified Professional Practice Test

SCP-500 Regulatory Frameworks & Compliance 5