At a city special-event venue, recon shows access points still using vendor-default SSID naming patterns. What should the assessor conclude from that observation?
Select an answer to reveal the explanation.
Short Explanation
If the SSID still looks like it left the factory gift box, someone probably rushed the build. Flag it for inventory and hardening follow-up. Defaults are a clue about ops hygiene, not proof of a finished secure design.
Full Explanation
Vendor-default SSID patterns are a classic recon signal of incomplete hardening or unmanaged gear, useful for municipal inventories and risk discussions. They do not by themselves prove modern crypto strength, remove devices from scope, or hide BSSIDs from survey tools. Assessors should document the finding and confirm ownership before any active testing.