A county security lead asks why weak Wi-Fi passphrases often fall after a WPA2-Personal handshake is obtained in an authorized assessment. What is the core reason?
Select an answer to reveal the explanation.
Short Explanation
Once you have a solid handshake under RoE, the guessing moves to your own hardware—no need to keep poking the AP for each try. Weak passphrases fold under that offline dictionary-class pressure. Strong, unique passphrases are how counties survive that step.
Full Explanation
A usable WPA2-Personal handshake lets assessors verify passphrase candidates offline against the captured key-exchange material. That offline property means weak, common, or policy-violating passphrases can be discovered without continued live querying of the AP for each guess. The handshake does not turn the network into cleartext by itself, embed the PSK in beacons, or convert the BSS to WEP. Remediation centers on strong PSKs or moving to stronger enterprise/SAE designs as appropriate.