A city still runs mixed WEP plus WPA on one BSS for 'compatibility.' What should the assessor conclude about that baseline?
Select an answer to reveal the explanation.
Short Explanation
Leaving WEP on 'just for the old printer' is leaving the alley door unlocked while bragging about the front deadbolt. Attackers aim at the weak door. Mixed weak modes trash the whole building's security story.
Full Explanation
When a BSS still permits WEP among other suites, stations and attackers can target the weakest offered path and the overall security claim collapses to that floor. Compatibility arguments do not justify retaining broken ciphers on municipal infrastructure SSIDs. Assessors should require removal of WEP from mixed modes and migration of legacy endpoints onto isolated, time-bounded exceptions if needed.