Inventory shows a city IoT SSID with WPS push-button configuration (PBC) enabled. What awareness point should the assessment highlight?
Select an answer to reveal the explanation.
Short Explanation
Push-button is less 'guess the PIN from parking lot' and more 'who can reach the button.' Still watch physical access and policy—PBC is not a magic PSK shredder. Treat proximate misuse as a real story.
Full Explanation
WPS PBC avoids remote PIN enumeration by requiring a button press (or equivalent) within a time window, shifting risk toward physical or proximate abuse and weak operational controls. It does not broadcast the PSK in beacons, delete the passphrase each press, or equal an unlocked static PIN with no protections. Assessments should note residual misuse and policy gaps.