VCP Regulatory Compliance & Legal Framework 3

Question 1

A VMware vSphere environment processes data for California residents. Which regulation grants those residents the right to opt out of the sale of their personal information?

Accepted Answer

CCPA/CPRA

Answer

The California Consumer Privacy Act (CCPA), as amended by the CPRA, grants California residents the right to opt out of the sale or sharing of their personal information.

Question 2

In a FedRAMP authorized cloud deployment using VMware Cloud on AWS, which party is responsible for ensuring the hypervisor layer meets FedRAMP security requirements?

Accepted Answer

The Cloud Service Provider (CSP)

Answer

Under the FedRAMP shared responsibility model, the CSP is responsible for the security of hypervisor and underlying infrastructure layers.

Question 3

Which vSphere configuration option helps satisfy the NIST SP 800-53 AC-2 (Account Management) control by automatically disabling inactive accounts?

Accepted Answer

vCenter SSO inactivity timeout and account lockout policy

Answer

SSO account lockout and inactivity settings in vCenter enforce automatic disabling of dormant accounts, directly supporting AC-2 account management requirements.

Question 4

A healthcare organization is using vSAN to store VMs containing ePHI. Which vSAN capability directly supports HIPAA's requirement for data-at-rest encryption?

Accepted Answer

vSAN Data-at-Rest Encryption (D@RE)

Answer

vSAN Data-at-Rest Encryption (D@RE) encrypts all data stored on vSAN datastores, satisfying HIPAA's addressable encryption standard for ePHI at rest.

Question 5

Under SOC 2 Trust Services Criteria, which category specifically evaluates whether a service organization's virtual infrastructure is available as agreed upon?

Accepted Answer

Availability

Answer

The SOC 2 Availability criteria evaluates whether systems are available for operation and use as committed, including uptime SLAs for virtual infrastructure.

VCP - VMware Certified Professional Practice Test

VCP - VMware Certified Professional Practice Test

VCP Regulatory Compliance & Legal Framework 3