Study. uk . com
  1. Home
  2. All questions
  3. Question 304

CISSP study material · question 304 of 500

A security team monitors its wireless networks for wireless-specific attacks but performs no patching or configuration verification on the wireless components. Which two expectations from NIST SP 800-153 are unmet? Choose two.

  1. Continuous packet capture of all wireless traffic for later forensic use.
  2. Vulnerability monitoring of wireless components, identifying and applying patches.
  3. Verifying and adjusting the security configuration settings of those components.
  4. Physical inspection of every access point at least monthly.
Show the answer

Answer: B. Vulnerability monitoring of wireless components, identifying and applying patches.
C. Verifying and adjusting the security configuration settings of those components.

SP 800-153 asks for both attack and vulnerability monitoring, with vulnerability work covering patch identification and application and verification of configuration settings, at least as often as for wired equivalents.

Source: NIST SP 800-153 (NIST) — SP 800-153 > Executive Summary

Challenge yourself on this topic → Study as cards