Which set of methods may be used to detect and identify wireless devices?

Which set of methods may be used to detect and identify wireless devices?

• A. Only physical inspections.
• B. Only wireless network scans.
• C. Wireless network scans, physical/logical inspections, NAC, or wireless IDS/IPS; whichever methods are used must detect authorized and unauthorized devices.
• D. SCADA system monitoring.

Answer: (C)

Detecting and identifying wireless devices requires a layered approach that combines discovery with enforcement. Relying on a single method leaves gaps, since some devices may be hidden, not actively broadcasting, or masquerading as authorized equipment. Using wireless network scans helps uncover access points and clients in proximity to the network. Physical inspections catch rogue hardware that could be connected or concealed in the environment. Logical inspections—such as comparing devices against an approved asset inventory—help verify which devices should be present. Network access control enforces policies to ensure only compliant, authorized devices can connect. Wireless intrusion detection and prevention systems monitor for rogue access points, unauthorized devices, or unusual wireless activity. Together, these methods ensure both authorized devices are recognized and unauthorized devices are detected, which aligns with PCI DSS goals for wireless security. Relying only on physical inspections misses devices that are not visible; relying only on wireless scans may miss devices that aren’t broadcasting or are already connected; SCADA system monitoring is not the appropriate toolset for comprehensive wireless device detection in this context.

Detecting and identifying wireless devices requires a layered approach that combines discovery with enforcement. Relying on a single method leaves gaps, since some devices may be hidden, not actively broadcasting, or masquerading as authorized equipment. Using wireless network scans helps uncover access points and clients in proximity to the network. Physical inspections catch rogue hardware that could be connected or concealed in the environment. Logical inspections—such as comparing devices against an approved asset inventory—help verify which devices should be present. Network access control enforces policies to ensure only compliant, authorized devices can connect. Wireless intrusion detection and prevention systems monitor for rogue access points, unauthorized devices, or unusual wireless activity. Together, these methods ensure both authorized devices are recognized and unauthorized devices are detected, which aligns with PCI DSS goals for wireless security. Relying only on physical inspections misses devices that are not visible; relying only on wireless scans may miss devices that aren’t broadcasting or are already connected; SCADA system monitoring is not the appropriate toolset for comprehensive wireless device detection in this context.