Study. uk . com
  1. Home
  2. All questions
  3. Question 301

CISSP study material · question 301 of 500

A laptop is docked to the wired network while its wireless adapter remains associated with an external access point. What risk does NIST SP 800-153 identify, and what does it ask for?

  1. The device will exhaust its address pool, so policy should mandate static addressing.
  2. The device will suffer degraded throughput, so policy should disable one adapter for performance.
  3. The device cannot be monitored, so policy should exclude it from vulnerability scanning.
  4. The device bridges the two networks, so policy must state which dual connections are permitted and enforce it with controls.
Show the answer

Answer: D. The device bridges the two networks, so policy must state which dual connections are permitted and enforce it with controls.

An attacker who takes the wireless side of a dual-connected client can use it to reach the wired network, so policy must state and enforce the rules.

Source: NIST SP 800-153 (NIST) — SP 800-153 > Executive Summary

Challenge yourself on this topic → Study as cards