A student claims Enterprise Wi-Fi means an un-capturable handshake compared with WPA-Personal. What nuance should the instructor teach?
Select an answer to reveal the explanation.
Short Explanation
Enterprise is not invisibility cloak for handshakes. It moves the fight from PSK four-way cracking toward EAP credential and certificate surfaces—different goals, still real.
Full Explanation
Enterprise Wi-Fi does not mean an un-capturable handshake compared with WPA-Personal; the instructor should teach that Enterprise shifts the problem toward EAP credential and certificate attack classes rather than classic PSK handshake cracking. Enterprise does not remove all wireless frames from the air so captures become physically impossible. Enterprise does not guarantee that evil twins cannot advertise the same SSID as production. Enterprise does not convert every association into WEP shared-key authentication automatically. Exam caveat: candidates who only memorize Personal workflows will mis-handle MGT or 802.1X indicators on timed assessments and civic jobs. Operational check: when recon shows Enterprise, switch the municipal test plan to EAP method review, trust-store checks, and authorized twin or credential-class techniques permitted by RoE—not rockyou against a nonexistent PSK. For municipal and campus engagements, keep the finding language tied to authorized scope, name the building or SSID class affected, and state the residual risk to residents or staff if the rejected option had been chosen. Re-validate after the next change window that the selected control still matches inventory, monitoring, and RoE abort criteria used by the city wireless program.