Which regulatory, standards-based compliance pack is available in vRealize Operations?

Question

Options

• ASarbanes-Oxley Act (SOX)
• BCommon Vulnerabilities and Exposures (CVE)
• CCIS Security Standards
• DGeneral Data Protection Regulation (GDPR)

• A
  2% (1)
• B
  2% (1)
• C
  94% (44)
• D
  2% (1)

Explanation

CIS Security Standards (C) is correct because VMware vRealize Operations ships with built-in compliance packs based on the Center for Internet Security (CIS) benchmarks, which provide prescriptive configuration hardening guidelines for infrastructure. These packs allow administrators to assess their environment against CIS standards directly within the product.

• SOX (A) is a U.S. financial reporting regulation - while organizations subject to SOX may use vROps data to support audits, SOX is not a bundled compliance pack in the product.
• CVE (B) is a vulnerability cataloging system (maintained by MITRE/NIST), not a compliance framework - it identifies known security flaws but isn't a standards pack you apply in vROps.
• GDPR (D) is a European data privacy regulation - relevant to data handling practices, but not packaged as a vRealize Operations compliance content pack.

Memory tip: Think "CIS = Configuration Is Standardized" - CIS benchmarks are all about hardening configuration settings, which maps directly to what vROps monitors and enforces at the infrastructure layer.

No community discussion yet for this question.