A wash-class survey of municipal APs marks several WPS-capable devices as locked. How should an assessor interpret that status for online PIN attack feasibility?
Select an answer to reveal the explanation.
Short Explanation
Locked is the AP saying 'slow down'—online PIN pounding may be stalled for a while. It is not a promise the password is in the cloud or that offline magic is instant. Note it and adjust feasibility.
Full Explanation
Many APs implement WPS lockouts or rate limiting after failed PIN attempts, which reduces the practicality of online attack classes until the device unlocks. Locked status does not permanently uninstall WPS, publish the PSK, or prove that an offline recovery class will succeed immediately. Assessors document lock behavior as a feasibility factor.