CWS Regulatory Compliance & Legal Framework 5

Question 1

A wireless network installer in the US is deploying an 802.11ac AP with a third-party external antenna not listed in the AP's FCC grant. What is the correct compliance action?

Accepted Answer

Verify the combined system stays within FCC limits or obtain a new FCC authorization for the modified configuration

Answer

Substituting an antenna not covered in the original FCC equipment authorization requires verifying the system remains within authorized limits or obtaining a new authorization for the modified configuration.

Question 2

Under PCI DSS requirements for wireless networks in cardholder data environments (CDE), organizations must perform which wireless-specific security task at least quarterly?

Accepted Answer

Scan for unauthorized wireless access points (rogue AP detection)

Answer

PCI DSS Requirement 11.2 mandates quarterly wireless scans to detect rogue access points in or near the cardholder data environment.

Question 3

The FCC's ruling in the 2015 Wi-Fi Blocking Order (DA 15-1220) prohibits what specific activity by hotels, convention centers, and other venues?

Accepted Answer

Deliberately blocking or interfering with guests' personal Wi-Fi hotspots to force purchase of venue Wi-Fi

Answer

The FCC's 2015 ruling clarified that venues may not use deauthentication attacks or other jamming techniques to block personal hotspots, as this constitutes illegal interference under Part 15 rules.

Question 4

Which US law specifically prohibits the operation of a 'signal booster' or 'repeater' for cellular frequencies without carrier consent or FCC registration?

Accepted Answer

FCC Part 20 rules implementing the Signal Booster Order (FCC 13-21)

Answer

The FCC's Signal Booster Order (FCC 13-21), codified in Part 20, requires consumer signal boosters to be registered with a carrier and prohibits network boosters without explicit carrier consent.

Question 5

When deploying a wireless system at a US federal government facility, which additional framework beyond FCC compliance typically governs wireless security requirements?

Accepted Answer

NIST SP 800-153 guidelines and FISMA requirements

Answer

Federal wireless deployments must comply with FISMA and follow NIST SP 800-153 (Guidelines for Securing Wireless Local Area Networks), which establishes security requirements beyond FCC radio authorization.

(CWS) Certified Wireless Specialist Practice Test

(CWS) Certified Wireless Specialist Practice Test

CWS Regulatory Compliance & Legal Framework 5