A municipal rules of engagement forbid deauthentication during a WPA2-Personal assessment. How should the team collect handshake material?
Select an answer to reveal the explanation.
Short Explanation
No-deauth RoE means patience, not improvising forced disconnects. Wait for natural reconnects or schedule a window when authorized devices can rejoin on purpose. The handshake still matters—you just collect it without kicking clients.
Full Explanation
Deauthentication can force clients to reauthenticate and emit handshake frames, but authorized engagements may prohibit that disruption. Assessors then rely on passive collection during natural roam/reconnect events or coordinated reconnect windows with the client. Violating RoE, pivoting to unrelated WEP myths, or taking down AP radios is not an acceptable substitute. Scope-compliant handshake collection remains the correct path.