Regulatory Compliance & Guidelines Flashcards
7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Compliance & Guidelines flashcards as text
What does the FCC Automated Frequency Coordination (AFC) system do for 6 GHz standard-power Wi-Fi devices?
Answer: Provides real-time database lookups to ensure APs avoid interfering with licensed incumbents before transmitting
AFC queries a geo-location database of licensed 6 GHz incumbents and returns the permissible frequencies and power levels for a given AP location in near real time.
Which Aruba AOS feature allows an administrator to create a separate VLAN and policy for guest traffic to maintain PCI DSS network segmentation?
Answer: User-Based Tunneling (UBT) or VLAN-per-role with ClearPass policy enforcement
Aruba's role-based access control assigns guest users to isolated VLANs with restricted policies, providing the network segmentation PCI DSS requires.
An Aruba AP is FCC certified with a maximum conducted power of 23 dBm and uses an antenna with 6 dBi gain. What is the resulting EIRP?
Answer: 29 dBm
EIRP = conducted power + antenna gain = 23 dBm + 6 dBi = 29 dBm.
Under HIPAA, what is required when a workforce member's mobile device that accesses ePHI over the Aruba WLAN is lost or stolen?
Answer: A breach risk assessment must be conducted and affected individuals notified if risk is not low
HIPAA's Breach Notification Rule requires a risk assessment after a potential breach; if the risk to ePHI is not low, affected individuals and HHS must be notified.
Which Wi-Fi Alliance certification program maps most directly to the regulatory requirement for strong mutual authentication in enterprise wireless deployments?
Answer: WPA3-Enterprise with 192-bit security mode
WPA3-Enterprise's 192-bit security mode uses Suite B cryptography and mandates mutual authentication via EAP-TLS, satisfying requirements in NIST SP 800-153 and similar frameworks.
A compliance officer asks whether Aruba's over-the-air traffic is FIPS 140-2 compliant. Which component must be validated to satisfy this requirement?
Answer: The cryptographic module (AES-CCMP engine) within the AP firmware must hold a FIPS 140-2 certificate
FIPS 140-2 requires that the cryptographic module itself — including the AP's AES-CCMP implementation — be independently validated and certificated.
What is the correct action when an Aruba AP's country code is misconfigured, causing it to operate on channels not authorized in that country?
Answer: Correct the country code in the AP configuration immediately, as operating on unauthorized channels violates local spectrum regulations
Operating on channels not authorized by local regulators (e.g., channels 12/13 in the US or UNII-2 without DFS) violates FCC/local regulations and must be corrected immediately.