Windows XP Pro Regulatory Frameworks & Compliance 2

Question 1

Under HIPAA, which Windows XP Pro feature helps ensure that ePHI stored locally is protected if a laptop is stolen?

Accepted Answer

Encrypting File System (EFS)

Answer

EFS encrypts files on NTFS volumes so that stolen hardware cannot expose protected health information without the proper credentials.

Question 2

Sarbanes-Oxley (SOX) Section 404 requires organizations to maintain internal controls over financial reporting. Which Windows XP Pro audit policy directly supports this?

Accepted Answer

Audit object access

Answer

Auditing object access logs who reads or modifies files, supporting SOX requirements to track access to financial data.

Question 3

A company must comply with PCI DSS and needs to ensure Windows XP Pro workstations never store cardholder data in browser caches. Which setting achieves this?

Accepted Answer

Configure Internet Explorer to delete temporary files on browser close

Answer

Configuring IE to delete temporary Internet files on exit prevents cached cardholder data from persisting on the workstation.

Question 4

GLBA (Gramm-Leach-Bliley Act) requires financial institutions to safeguard customer data. Which Windows XP Pro Group Policy setting limits who can log on locally to financial workstations?

Accepted Answer

Allow log on locally user right

Answer

The 'Allow log on locally' user right in Group Policy restricts which users can interactively log on to a workstation.

Question 5

Which Windows XP Pro tool would an auditor use to verify that security policy settings match a documented compliance baseline across multiple machines?

Accepted Answer

Security Configuration and Analysis snap-in

Answer

The Security Configuration and Analysis snap-in compares current settings to a security template, identifying deviations from a compliance baseline.

Windows XP Pro Practice Test

Windows XP Pro Practice Test

Windows XP Pro Regulatory Frameworks & Compliance 2