An assessor must choose between WPS testing and rogue-AP testing against a locked-down municipal WPA3-SAE network with WPS disabled. Which selection principle applies?
Select an answer to reveal the explanation.
Short Explanation
You attack what is actually turned on. WPS off means WPS techniques are a dead end—shift to surfaces that exist, like rogue/client-attraction classes if RoE allows. Do not invent WPS because SAE is there, and do not break the city's config just to keep every lab toy in play.
Full Explanation
Assessment technique selection must follow enabled features and RoE. If WPS is disabled, WPS PIN/offline classes are not viable; other authorized classes (for example rogue-AP themes) may still apply. SAE does not mandate WPS; WPA3 does not outlaw all rogue testing; weakening production security to broaden attacks is inappropriate.