nerdexam
CompTIA

CAS-002 · Question #279

A university Chief Information Security Officer is analyzing various solutions for a new project involving the upgrade of the network infrastructure within the campus. The campus has several dorms…

The correct answer is C. Accept the risk of possible network outages and implement a WLAN solution to provide. Implementing a WLAN solution while accepting the residual risk of outages is the only option that satisfies all three stated goals - ubiquitous connectivity, IT flexibility, and high-speed campus-wide coverage.

Technical Integration of Enterprise Components

Question

A university Chief Information Security Officer is analyzing various solutions for a new project involving the upgrade of the network infrastructure within the campus. The campus has several dorms (two-four person rooms) and administrative buildings. The network is currently setup to provide only two network ports in each dorm room and ten network ports per classroom. Only administrative buildings provide 2.4 GHz wireless coverage. The following three goals must be met after the new implementation: 1. Provide all users (including students in their dorms) connections to the Internet. 2. Provide IT department with the ability to make changes to the network environment to improve performance. 3. Provide high speed connections wherever possible all throughout campus including sporting event areas. Which of the following risk responses would MOST likely be used to reduce the risk of network outages and financial expenditures while still meeting each of the goals stated above?

Options

  • AAvoid any risk of network outages by providing additional wired connections to each user
  • BTransfer the risk of network outages by hiring a third party to survey, implement and manage
  • CAccept the risk of possible network outages and implement a WLAN solution to provide
  • DMitigate the risk of network outages by implementing SOHO WiFi coverage throughout the

How the community answered

(63 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    84% (53)
  • D
    10% (6)

Why each option

Implementing a WLAN solution while accepting the residual risk of outages is the only option that satisfies all three stated goals - ubiquitous connectivity, IT flexibility, and high-speed campus-wide coverage.

AAvoid any risk of network outages by providing additional wired connections to each user

Expanding wired connections avoids wireless outage risk but cannot feasibly extend to sporting event areas and all dorm rooms at acceptable cost, failing the pervasive high-speed coverage goal and the flexibility goal.

BTransfer the risk of network outages by hiring a third party to survey, implement and manage

Transferring risk to a third party addresses risk posture but does not specify the technology solution - outsourced management alone does not satisfy the technical goals of campus-wide wireless connectivity and IT-controlled performance tuning.

CAccept the risk of possible network outages and implement a WLAN solution to provideCorrect

Accepting risk and deploying an enterprise WLAN solution directly addresses all three goals: it extends Internet access beyond the limited wired ports in dorms and into sporting areas, it allows IT to modify wireless configurations centrally for performance improvements, and it delivers high-speed coverage throughout the campus including outdoor venues. Risk acceptance is appropriate here because the scope of coverage required makes wireless the only viable technology, and the benefit outweighs the residual outage risk.

DMitigate the risk of network outages by implementing SOHO WiFi coverage throughout the

SOHO (Small Office/Home Office) WiFi equipment lacks the enterprise-grade capacity, range, centralized management, and roaming support needed for a multi-building campus, failing the high-speed ubiquitous coverage goal and the IT management flexibility goal.

Concept tested: Risk acceptance strategy for enterprise WLAN campus deployment

Source: https://csrc.nist.gov/glossary/term/risk_acceptance

Topics

#WLAN#network design#risk acceptance#campus network

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-002 Practice