ACP Regulatory Compliance & Guidelines 2 — Questions and Answers
Question 1: Which FCC regulation part primarily governs unlicensed wireless devices operating in the 2.4 GHz and 5 GHz bands used by Wi-Fi?
- FCC Part 15 (Correct answer)
- FCC Part 22
- FCC Part 90
- FCC Part 97
Correct answer: FCC Part 15
FCC Part 15 covers unlicensed intentional, unintentional, and incidental radiators, including Wi-Fi devices in the ISM bands.
Question 2: An Aruba controller is being deployed in a hospital. Which compliance framework most directly addresses wireless security requirements for protecting patient health information?
- HIPAA Security Rule (Correct answer)
- PCI DSS
- SOX
- FERPA
Correct answer: HIPAA Security Rule
HIPAA's Security Rule mandates administrative, physical, and technical safeguards for electronic protected health information (ePHI), including wireless networks.
Question 3: What is the maximum EIRP allowed for 5 GHz UNII-1 (5.15–5.25 GHz) indoor Wi-Fi operation in the US under FCC rules?
- 200 mW (23 dBm) (Correct answer)
- 1 W (30 dBm)
- 4 W (36 dBm)
- 50 mW (17 dBm)
Correct answer: 200 mW (23 dBm)
FCC limits UNII-1 (5.15–5.25 GHz) to 200 mW (23 dBm) EIRP for indoor use only.
Question 4: Dynamic Frequency Selection (DFS) is required on Aruba APs operating in which frequency range to avoid interfering with radar systems?
- 5.25–5.725 GHz (UNII-2 and UNII-2e) (Correct answer)
- 2.4–2.4835 GHz
- 5.725–5.850 GHz (UNII-3)
- 6.0–6.425 GHz (UNII-5)
Correct answer: 5.25–5.725 GHz (UNII-2 and UNII-2e)
DFS is mandated by the FCC for UNII-2 and UNII-2e channels (5.25–5.725 GHz) to detect and avoid radar systems.
Question 5: A retail company processes credit card transactions over its Aruba wireless network. Which standard requires encryption and network segmentation for cardholder data environments?
- PCI DSS (Correct answer)
- HIPAA
- FISMA
- GLBA
Correct answer: PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) mandates encryption, segmentation, and access controls for networks handling cardholder data.
Question 6: Which Aruba feature helps enforce regulatory compliance by automatically scanning for rogue APs and classifying them as interferers or threats?
- Wireless Intrusion Protection (WIPS/WIDS) (Correct answer)
- AirSlice QoS
- AppRF visibility
- ClientMatch
Correct answer: Wireless Intrusion Protection (WIPS/WIDS)
Aruba's WIPS/WIDS continuously monitors the RF environment to detect, classify, and contain rogue devices, satisfying compliance mandates like PCI DSS.
Question 7: When deploying Aruba APs in a US federal government environment, which compliance framework mandates a formal Authorization to Operate (ATO) process?
- FISMA / FedRAMP (Correct answer)
- PCI DSS
- HIPAA
- ISO 27001
Correct answer: FISMA / FedRAMP
FISMA (Federal Information Security Modernization Act) and its cloud counterpart FedRAMP require agencies to obtain an ATO before operating IT systems.
ACP Regulatory Compliance & Guidelines 2
Which FCC regulation part primarily governs unlicensed wireless devices operating in the 2.4 GHz and 5 GHz bands used by Wi-Fi?