2.2 Verify and Validate Design (e.g., Functional Acceptance Testing, Regression) ISSAP Practice Questions (Page 5)

Questions 21–21

1. 21application · medium

   A security architect is validating a new wireless network design. The threat model identified a gap: the design does not include rogue access point detection. The architect is considering adding a wireless intrusion prevention system (WIPS) or implementing periodic manual scans. The organization has a small IT team and limited budget. Which action should the architect take?

   • AAccept the risk because the wireless network is not critical.
   • BConduct a tabletop exercise to discuss rogue access point scenarios.
   • CImplement a WIPS to automatically detect and mitigate rogue access points.
   • DImplement periodic manual scans for rogue access points.
   Reveal Solution Discussion Select an answer first