← All ACP Flashcard Decks

Regulatory Compliance & Guidelines Flashcards

7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Regulatory Compliance & Guidelines flashcards as text
  1. What does the FCC Automated Frequency Coordination (AFC) system do for 6 GHz standard-power Wi-Fi devices?

    Answer: Provides real-time database lookups to ensure APs avoid interfering with licensed incumbents before transmitting

    AFC queries a geo-location database of licensed 6 GHz incumbents and returns the permissible frequencies and power levels for a given AP location in near real time.

  2. Which Aruba AOS feature allows an administrator to create a separate VLAN and policy for guest traffic to maintain PCI DSS network segmentation?

    Answer: User-Based Tunneling (UBT) or VLAN-per-role with ClearPass policy enforcement

    Aruba's role-based access control assigns guest users to isolated VLANs with restricted policies, providing the network segmentation PCI DSS requires.

  3. An Aruba AP is FCC certified with a maximum conducted power of 23 dBm and uses an antenna with 6 dBi gain. What is the resulting EIRP?

    Answer: 29 dBm

    EIRP = conducted power + antenna gain = 23 dBm + 6 dBi = 29 dBm.

  4. Under HIPAA, what is required when a workforce member's mobile device that accesses ePHI over the Aruba WLAN is lost or stolen?

    Answer: A breach risk assessment must be conducted and affected individuals notified if risk is not low

    HIPAA's Breach Notification Rule requires a risk assessment after a potential breach; if the risk to ePHI is not low, affected individuals and HHS must be notified.

  5. Which Wi-Fi Alliance certification program maps most directly to the regulatory requirement for strong mutual authentication in enterprise wireless deployments?

    Answer: WPA3-Enterprise with 192-bit security mode

    WPA3-Enterprise's 192-bit security mode uses Suite B cryptography and mandates mutual authentication via EAP-TLS, satisfying requirements in NIST SP 800-153 and similar frameworks.

  6. A compliance officer asks whether Aruba's over-the-air traffic is FIPS 140-2 compliant. Which component must be validated to satisfy this requirement?

    Answer: The cryptographic module (AES-CCMP engine) within the AP firmware must hold a FIPS 140-2 certificate

    FIPS 140-2 requires that the cryptographic module itself — including the AP's AES-CCMP implementation — be independently validated and certificated.

  7. What is the correct action when an Aruba AP's country code is misconfigured, causing it to operate on channels not authorized in that country?

    Answer: Correct the country code in the AP configuration immediately, as operating on unauthorized channels violates local spectrum regulations

    Operating on channels not authorized by local regulators (e.g., channels 12/13 in the US or UNII-2 without DFS) violates FCC/local regulations and must be corrected immediately.