A city CISO asks why encrypting the assessor's generic wordlist on disk matters less than locking down cracked guest PSKs and client identifiers from the engagement. What is the best answer?
Select an answer to reveal the explanation.
Short Explanation
The wordlist is a phone book; the cracked guest key is the spare house key. Protect the secrets you recovered—passphrases and client clues—harder than a dictionary anyone can download. Report PDFs do not make those outputs free to leave unlocked.
Full Explanation
Public or commonly shared wordlists are low-sensitivity tooling compared with recovered credentials and engagement-specific client data. Assessors should prioritize secure storage, least-privilege access, and controlled delivery of cracked PSKs and related identifiers. Claiming wordlists hold RADIUS secrets, that report inclusion voids protection, or that open-records law permits free publication during a test misstates data-handling priorities.