Regulatory Compliance & Guidelines Flashcards
7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Compliance & Guidelines flashcards as text
What is the primary purpose of Transmit Power Control (TPC) as required in the 5 GHz UNII-2 band?
Answer: To reduce interference with incumbent services such as radar and satellites
TPC reduces the risk of interference with incumbent users (radar, satellite uplinks) sharing the UNII-2 band by dynamically limiting transmit power.
Which Aruba security feature generates audit logs that can be used to demonstrate compliance with HIPAA audit control requirements?
Answer: Aruba Central or AOS audit trail / syslog integration
HIPAA's Technical Safeguard for Audit Controls requires hardware and software activity records; Aruba Central's audit logs and syslog export satisfy this requirement.
An Aruba AP in the US is configured to broadcast on channel 36 (5.180 GHz). An administrator wants to add an external high-gain antenna. What regulatory constraint applies?
Answer: Total EIRP must not exceed the FCC-authorized limit, and the AP-antenna combination must be FCC certified
FCC rules require that the entire intentional radiator system (AP + antenna) be authorized and that EIRP limits are not exceeded; using unapproved antennas can violate authorization.
Under GDPR, an EU-based enterprise using Aruba wireless must ensure that location tracking data collected by the WLAN is handled in accordance with which principle?
Answer: Data minimization and purpose limitation
GDPR Article 5 requires that personal data (including location data) be collected for specified, explicit purposes and limited to what is necessary.
A PCI DSS assessor asks for evidence of quarterly wireless scans. Which Aruba capability provides the automated evidence needed?
Answer: Aruba WIPS scheduled rogue AP scan reports
PCI DSS Requirement 11.2 mandates quarterly wireless scans to detect unauthorized APs; Aruba WIPS can automate and report these scans.
Which IEEE standard underpins the 802.11i security amendment that most enterprise compliance frameworks (PCI DSS, HIPAA) reference when requiring strong wireless encryption?
Answer: IEEE 802.11i (RSN — Robust Security Network)
IEEE 802.11i defined the Robust Security Network (RSN) architecture, including CCMP/AES encryption and 802.1X authentication, which WPA2 and WPA3 are based on.
A US-based K-12 school district uses Aruba wireless for student internet access. Which federal law requires the district to implement internet filtering and adopt an Internet Safety Policy?
Answer: CIPA (Children's Internet Protection Act)
CIPA requires schools and libraries receiving E-rate federal funding to deploy content filtering and an Internet Safety Policy to protect minors online.