A county compares password-spray risk on Enterprise Wi-Fi usernames…

Question

A county compares password-spray risk on Enterprise Wi-Fi usernames discovered via EAP. What chained risk should the brief note?

Accepted Answer

Exposed EAP identities can feed password attacks against directories if not monitored—treat it as chained risk. — Usernames leaking from EAP are breadcrumbs to the directory door. If nobody watches, spray classes may follow—call that chained risk, not a free PSK or a WPS-only problem.

Answer

EAP usernames cryptographically include the PSK, so spraying is unnecessary once identities are seen.

Answer

EAP usernames prove WPS is enabled, so spray risk is limited to eight-digit PIN space only.

Answer

EAP usernames automatically rotate daily, eliminating directory spray usefulness.

A county compares password-spray risk on Enterprise Wi-Fi usernames discovered via EAP. What chained risk should the brief note?

Short Explanation

Full Explanation