Auditors ask whether Management Frame Protection (PMF / 802.11w) is enabled on SSIDs that require it. What should the WLAN security design validate?
Select an answer to reveal the explanation.
Short Explanation
PMF puts armor on management frames so cheap deauth tricks hurt less. Where WPA3 and policy say it is required, turn it on and verify it. Longer DHCP leases are not a substitute.
Full Explanation
Protected Management Frames (802.11w / PMF) mitigate certain management-frame attacks and are required or expected in modern WPA3 and many enterprise profiles. Security design should validate enablement rather than disabling PMF or substituting unrelated timer tweaks.