Study. uk . com
  1. Home
  2. All questions
  3. Question 305

CISSP study material · question 305 of 500

An organisation performs a wireless security assessment every two years and has no continuous monitoring. What cadence does NIST SP 800-153 expect?

  1. Assessments only after a change to the wireless infrastructure.
  2. At least annually, with periodic assessments at least quarterly unless continuous monitoring already collects the same information.
  3. Monthly assessments, regardless of whether continuous monitoring exists.
  4. At least every two years, which the organisation already meets.
Show the answer

Answer: B. At least annually, with periodic assessments at least quarterly unless continuous monitoring already collects the same information.

SP 800-153 expects assessments at least annually to evaluate overall wireless security, plus periodic assessments at least quarterly unless continuous monitoring already gathers the necessary information.

Source: NIST SP 800-153 (NIST) — SP 800-153 > Executive Summary

Challenge yourself on this topic → Study as cards