ACP Regulatory Compliance & Guidelines 3 — Questions and Answers
Question 1: Which regulatory body in the European Union sets equivalent spectrum usage rules for Wi-Fi devices similar to FCC Part 15 in the US?
- ETSI / CE marking framework (Correct answer)
- Ofcom
- BNetzA
- ITU-R
Correct answer: ETSI / CE marking framework
ETSI (European Telecommunications Standards Institute) publishes the EN 300 328 and EN 301 893 standards adopted across EU member states, enforced via CE marking.
Question 2: An Aruba AP is deployed near a US military base where radar operates in the UNII-2 band. What action must the AP take upon detecting radar?
- Vacate the channel within 10 seconds and not return for 30 minutes (Correct answer)
- Reduce transmit power by 50% and continue operating
- Switch to the 2.4 GHz band immediately
- Alert the controller and wait for manual reassignment
Correct answer: Vacate the channel within 10 seconds and not return for 30 minutes
FCC DFS rules require that upon radar detection, the device must cease transmission on that channel within 10 seconds and observe a 30-minute non-occupancy period.
Question 3: Under PCI DSS Requirement 1, what must be implemented between the cardholder data environment and the wireless network?
- A firewall or equivalent network segmentation control (Correct answer)
- WPA2-Personal encryption
- MAC address filtering
- A dedicated RADIUS server
Correct answer: A firewall or equivalent network segmentation control
PCI DSS Requirement 1 mandates installing and maintaining network security controls, including firewalls, to isolate the cardholder data environment from untrusted networks including wireless.
Question 4: Which encryption protocol is the minimum required by PCI DSS for wireless networks that transmit cardholder data?
- WPA2 or WPA3 with AES encryption (Correct answer)
- WEP with 128-bit keys
- TKIP-based WPA
- Any VPN overlay on open Wi-Fi
Correct answer: WPA2 or WPA3 with AES encryption
PCI DSS requires strong cryptography such as WPA2/WPA3 with AES; deprecated protocols like WEP and TKIP are explicitly prohibited.
Question 5: Aruba ClearPass is used to enforce 802.1X authentication. Which PCI DSS requirement does this most directly satisfy?
- Requirement 8 — Identify users and authenticate access to system components (Correct answer)
- Requirement 3 — Protect stored account data
- Requirement 6 — Develop and maintain secure systems
- Requirement 10 — Log and monitor all access
Correct answer: Requirement 8 — Identify users and authenticate access to system components
PCI DSS Requirement 8 mandates unique user IDs and strong authentication, which 802.1X with ClearPass enforces for wireless network access.
Question 6: A university deploys Aruba wireless for student housing. Which US federal law governs the privacy of student education records and may impact wireless network logging policies?
- FERPA (Correct answer)
- COPPA
- CIPA
- GLBA
Correct answer: FERPA
FERPA (Family Educational Rights and Privacy Act) protects the privacy of student education records and affects what universities can log and share about student network activity.
Question 7: The 6 GHz Wi-Fi band (Wi-Fi 6E/7) in the US is authorized under which FCC rule and is restricted to what type of operation?
- FCC Part 15 UNII-5 through UNII-8; indoor low-power and standard power (AFC-controlled) (Correct answer)
- FCC Part 22; licensed outdoor only
- FCC Part 90; public safety priority
- FCC Part 97; amateur radio shared use
Correct answer: FCC Part 15 UNII-5 through UNII-8; indoor low-power and standard power (AFC-controlled)
The FCC opened 1200 MHz of 6 GHz spectrum under Part 15 with indoor low-power and AFC-managed standard power tiers (UNII-5 through UNII-8).
ACP Regulatory Compliance & Guidelines 3
Which regulatory body in the European Union sets equivalent spectrum usage rules for Wi-Fi devices similar to FCC Part 15 in the US?