A municipal rules of engagement document bans deauthentication entirely during a wireless assessment. Which approach remains appropriate for observing handshake-class traffic?
Select an answer to reveal the explanation.
Short Explanation
If the city says no deauth, put the cattle prod away. Sit on the right channel and wait for someone to reconnect the honest way. Passive waiting still gets handshake-class frames when clients return on their own.
Full Explanation
Deauthentication is a disruptive traffic-forcing technique and must be omitted when RoE forbids it. Assessors can still observe 4-way handshake material by remaining on the target channel and capturing natural association/reauthentication events. Substituting other injection floods, violating RoE, or assuming wired DHCP logs replace RF handshake capture are incorrect responses for authorized wireless assessment practice.