CISSP Practice Question: In a corporate environment, the security team is concerned about unauthorized wireless…

Correct Answer: C. Wireless Intrusion Prevention System (WIPS)

Explanation (CISSP Manager Logic):

A WIPS provides the specialized visibility required to enforce corporate wireless policies by identifying and neutralizing unauthorized hardware. From a risk management perspective, it automates the detection and containment of rogue devices that bypass traditional perimeter defenses.

By implementing this solution, you:

• Automate the discovery of unauthorized wireless signals.
• Mitigate the risk of "shadow IT" creating backdoors into the secure network.
• Ensure compliance with wireless security standards and organizational policies.

While the other options are relevant, they fall short because:

• A: An IDS monitors general network traffic for patterns but lacks the radio frequency (RF) scanning capabilities to locate physical rogue access points.
• B: NAT is a networking protocol used for address translation and provides no security monitoring or rogue device detection.
• D: VLANs provide logical segmentation and traffic isolation but cannot detect or prevent the physical installation of unauthorized hardware.

Think like a manager:

Prioritize specialized tools for specific technical risks. Effective governance requires automated enforcement mechanisms to maintain the integrity of the physical and logical network boundaries.