1. During a wireless assessment, what low-risk checks do you perform first?
Start passive. Identify SSIDs, bands, channels, and security modes. Note WPA version, 802.11w, and whether open or captive portals exist. Look for obvious misconfigs like WPS. Map coverage and BSSID counts. Only after approval, perform light auth and certificate checks for enterprise SSIDs. Keep traffic minimal and avoid client disruptions.
Checklist: SSIDs, auth type, PMF on, channel plan, WPS, captive portals, rogue SSIDs