Certified Ethical Hacker (CEH) Practice Question

802.11w adds cryptographic protection (integrity and optional encryption) to management frames such as deauthentication and disassociation. When PMF is required by both the AP and the client, any spoofed deauth or disassoc frames sent by an attacker fail the integrity check and are dropped, preventing the classic deauthentication or disassociation denial-of-service technique used to capture handshakes or disrupt connectivity. ARP replay targets data frames in WEP networks and is unaffected by PMF. WPS PIN brute forcing abuses a design flaw in the WPS protocol and does not rely on management-frame spoofing. An Evil Twin rogue AP attack leverages fake beacon and probe responses; PMF does not stop clients from seeing other beacons, so it remains possible. Therefore, deauthentication/disassociation flooding is the attack that PMF specifically mitigates.