A nonprofit asks whether Bluetooth and Wi-Fi are interchangeable for an 802.11 assessment scope. What should the lead reply?
Select an answer to reveal the explanation.
Short Explanation
Same neighborhood of spectrum, different sports. Wi-Fi assessment isn’t a free pass to poke Bluetooth unless the paperwork says so.
Full Explanation
OSWP and PEN-210-aligned assessment focus is IEEE 802.11 Wi-Fi: monitor mode, beacons, association behavior, handshakes, and related WLAN attack surfaces. Bluetooth is a different wireless technology family with different tooling, threat models, and legal framing. A nonprofit engagement should include Bluetooth only when the rules of engagement explicitly expand scope; otherwise the lead should keep analysis on named 802.11 BSS targets and avoid collecting adjacent-radio traffic that was never authorized. Claiming Bluetooth and 802.11 are the same PHY so every Wi-Fi tool fully covers Bluetooth by default is incorrect and leads to false coverage claims. Treating any 2.4 GHz energy as in-scope Wi-Fi without naming the technology invites off-scope collection and weak evidence. Asserting Bluetooth Classic is required as the primary target on every OSWP-similar concept item misstates both exam emphasis and professional wireless scoping practice. Exam caveat: Stay inside the written technology list; shared spectrum does not grant technology-agnostic permission to test everything that radiates. Operational check: Read the RoE technology clause before the first capture; if only 802.11 is named, do not pivot into Bluetooth enumeration without a documented stakeholder scope change.