A municipal red team wants a quick map of which access points advertise WPS capability before deeper testing. Which tool-purpose class fits that recon goal?
Select an answer to reveal the explanation.
Short Explanation
Want a cheat sheet of APs that still wave the WPS flag? Use a wash-class discovery pass—it is recon, not the full attack. Map candidates first; deeper WPS testing only if scope and RoE say so.
Full Explanation
Wash-class (and similar) WPS discovery tools enumerate which APs indicate WPS support so assessors can prioritize later vulnerability-class testing under authorization. That step is reconnaissance mapping, not passphrase invention, physical cabling work, or portal phishing. Keeping discovery separate from exploitation classes reflects safe municipal assessment practice.