An assessor documents the exact wordlist and rules used while recovering a municipal guest PSK. Why does that reporting detail matter?
Select an answer to reveal the explanation.
Short Explanation
Good reports are recipes, not magic tricks—name the wordlist and rules so the next tester can cook the same result. A passphrase screenshot without method is incomplete. Reproducibility is the professional bar.
Full Explanation
Documenting the exact wordlist and rules used while recovering a municipal guest PSK supports report reproducibility: another tester—or the same assessor months later—can repeat the offline attempt and understand how the passphrase was found. Civic reporting standards treat methodology transparency as part of findings credibility, especially when dictionary quality drove success more than raw GPU speed. Record list and rule identifiers through authorized client channels without turning disclosure into a public dump.
'Wordlist names must be hidden so competitors cannot reproduce wireless findings.' fails because hiding wordlist names blocks legitimate reproducibility for the authorized client rather than protecting the city. 'Citing wordlists converts the engagement into an Enterprise 802.1X design review.' fails because citing wordlists does not convert the engagement into an Enterprise 802.1X design review. 'Documenting wordlists is unnecessary if the passphrase itself is shown in a screenshot.' fails because showing a passphrase screenshot does not remove the need to document how recovery was performed.
Exam caveat: reproducibility is not permission to publish live PSKs on public forums—share via the engagement report path only. Operational check: in the city report appendix, record capture identifiers, cracker used, wordlist/rules names, and proof-of-join evidence; store sensitive outputs per data-handling rules. Peer-review that a colleague could re-run the offline stage from those notes alone. In municipal wireless operations, record the rationale in the engagement notes so future assessors know which control or technique class was chosen and which failure modes the rejected options would create for city services.