VCP Regulatory Compliance & Legal Framework 2

Question 1

Which US federal regulation specifically mandates security controls for electronic protected health information (ePHI) stored or processed in virtualized environments?

Accepted Answer

HIPAA Security Rule

Answer

The HIPAA Security Rule requires covered entities and business associates to implement technical safeguards for ePHI, including in virtualized and cloud environments.

Question 2

A VMware administrator needs to ensure audit logs cannot be tampered with to meet SOX compliance. Which vSphere feature best addresses this requirement?

Accepted Answer

VMware vSphere Syslog with remote forwarding to an immutable log store

Answer

Forwarding syslog to an immutable, remote log store ensures audit trail integrity required by SOX Section 802 for financial record retention.

Question 3

Under GDPR, what legal concept requires that personal data processing be limited to only what is necessary for the specified purpose?

Accepted Answer

Data Minimization

Answer

Data Minimization (Article 5(1)(c) GDPR) mandates that only data adequate, relevant, and limited to what is necessary for the purpose may be collected.

Question 4

Which VMware product provides a centralized policy engine to enforce network micro-segmentation controls that support PCI DSS Requirement 1 (network segmentation)?

Accepted Answer

NSX-T Data Center

Answer

NSX-T provides distributed firewall and micro-segmentation capabilities that enforce network isolation between cardholder data environment segments as required by PCI DSS Req 1.

Question 5

A company operating VMs in the US that store EU resident data is subject to which data transfer framework when moving that data back to EU-based systems?

Accepted Answer

EU-US Data Privacy Framework

Answer

The EU-US Data Privacy Framework (successor to Privacy Shield) governs lawful transfer of EU personal data to certified US organizations.

VCP - VMware Certified Professional Practice Test

VCP - VMware Certified Professional Practice Test

VCP Regulatory Compliance & Legal Framework 2