In a city wireless lab, staff ask what the WPA2-Personal 4-way handshake is meant to prove between the AP and a client. What is the best explanation?
Select an answer to reveal the explanation.
Short Explanation
Think of the 4-way handshake as both sides showing they know the shared secret without yelling the password across the park. Once that checks out, they install the pairwise keys for that session. That is the proof the lab is asking about.
Full Explanation
In WPA2-Personal, the 4-way handshake lets the AP and client demonstrate possession of key material derived from the shared PMK/PSK and then install pairwise transient keys for unicast protection (with group key distribution as part of the exchange class). It is not a billing check, an SSID replacement mechanism, or a method for broadcasting the passphrase in beacons. Understanding that purpose frames why complete handshake captures matter for offline assessment classes.