Which practice is required to detect unauthorized wireless access points on a quarterly basis?

• A. Test for the presence of wireless access points (802.11) and identify authorized and unauthorized wireless access points on a quarterly basis.
• B. Implement processes to test for presence of wireless access points and detect authorized and unauthorized APs quarterly.
• C. Review quarterly wireless policies
• D. Conduct annual wireless risk assessment

Answer: (A)

Detecting rogue wireless access points through active discovery is the core practice here. The important takeaway is to regularly look for wireless devices in the environment and distinguish which ones are authorized from which ones are not. Doing this on a quarterly basis provides a timely, repeatable process to spot unauthorized APs before they can be misused to capture data or propagate attacks.

The best option explicitly requires testing for the presence of wireless access points and identifying which are authorized and which are unauthorized, every quarter. This direct, concrete activity aligns with the goal of continuous monitoring and quick remediation.

The other options don’t require active discovery at the quarterly cadence or focus on policy review or a different frequency (such as annual risk assessment), which doesn’t meet the practical requirement of detecting rogue APs on a regular interval.