Windows XP Pro Regulatory Frameworks & Compliance 5

Question 1

Which Windows XP Pro event log setting is critical for compliance frameworks requiring log retention, and what is the default behavior when the log is full?

Accepted Answer

Overwrite events as needed — compliance requires changing this to 'Do not overwrite events'

Answer

The default 'Overwrite events as needed' can erase audit trails; compliance requires setting logs to 'Do not overwrite' and sizing logs appropriately.

Question 2

A company subject to PCI DSS 3.2 must log all administrative access to cardholder data systems. Which Windows XP Pro audit policy must be enabled?

Accepted Answer

Audit account logon events and Audit logon events

Answer

Both 'Audit account logon events' (domain authentication) and 'Audit logon events' (local logon) together capture all administrative access attempts.

Question 3

Under the principle of 'Defense in Depth' recommended by NIST, which combination of Windows XP Pro features provides multiple security layers for a compliance-sensitive workstation?

Accepted Answer

Windows Firewall + EFS + NTFS permissions + Audit policies

Answer

Defense in Depth requires layering controls — firewall for network access, EFS for data confidentiality, NTFS for access control, and auditing for accountability.

Question 4

Which Windows XP Pro feature allows a compliance officer to ensure that departing employees cannot access company resources using cached domain credentials after their account is disabled?

Accepted Answer

Set 'Interactive logon: Number of previous logons to cache' to 0

Answer

Setting cached logon count to 0 prevents Windows from caching domain credentials, so disabled domain accounts cannot log on offline.

Question 5

COPPA (Children's Online Privacy Protection Act) compliance requires strict access controls to systems storing children's data. Which Windows XP Pro audit setting would detect unauthorized access attempts?

Accepted Answer

Audit object access with failure auditing on the data folder

Answer

Enabling failure auditing for object access on the specific data folder creates log entries whenever unauthorized access attempts occur.

Windows XP Pro Practice Test

Windows XP Pro Practice Test

Windows XP Pro Regulatory Frameworks & Compliance 5